🚨⚠️WARNING⚠️
THE BIGGEST DEFI EXPLOIT IN 2026 HAS JUST HAPPENED
💥And $AAVE, the protocol that everyone considered SECURE, got caught in the middle and its token suffered a DROP of 20%. It wasn't a hack on Aave. But the damage is real.
👉On Saturday, April 18, an attacker exploited the cross-chain bridge of Kelp DAO, a liquid restaking protocol for ETH.
🔻The attacker forged a message and drained 116.500 rsETH (the liquid restaking token of Kelp) from the bridge contracts.
🔻Value at the time of the attack: $292 million. 18% of the entire circulating supply of the token.
🔻Kelp paused the contracts with its multisig in 46 minutes. But the damage was already done.
🧨 And here comes the part that involves Aave directly:
🔻The attackers took that stolen rsETH (which was now essentially unbacked paper) and deposited it as collateral in Aave V3.
🔻They then borrowed $236 million in WETH against that worthless collateral.
🔻When rsETH lost its 1-1 with $ETH and lost value, Aave was left with uncollectible debt. The estimated bad debt: between $177 and $200 million.
Why did Aave accept that collateral?
▪️Because DeFi is permissionless. Anyone can deposit any listed asset.
▪️The protocol has no human risk office asking "hey, where did this token come from?"
▪️The code accepts what the code was programmed to accept.
▪️That is the magic of DeFi. And that was also its Achilles' heel.
🩸 The immediate consequences were brutal:
▪️ The token $AAVE dropped between 16% and 22%.
▪️ The WETH pool reached 100% utilization. Loan rates skyrocketed. Massive withdrawals.
▪️ Aave froze the rsETH markets in V3 and V4 immediately.
▪️ Other protocols (SparkLend, Fluid, Compound V3, Euler) also paused rsETH as a precaution.
🎯 The irony of the timing:
▪️This happened weeks after Aave launched V4 with its Hub & Spoke architecture, the most ambitious project in its history.
▪️And the DAO had just approved a grant of $25 million for Aave Labs under the slogan "Aave Will Win." The momentum was extraordinary.
▪️And then rsETH arrived.
👀 Does Aave survive this?
📍Very likely yes. It has the Umbrella module (its insurance fund) and a DAO community with a history of resolving crises.
📍It has already survived worse crashes, including the collapse of Terra/Luna and the bear market of 2022, and now they are commenting that if there are losses, they will be covered.
📍But the message it leaves is undeniable: in DeFi there is no "too big to fail."
#KelpDAO #AAVE #HackerAlert #KelpDAOFacesAttack #defi $AAVE
