$293M Kelp DAO Hack Wipes $8B From Aave's TVL
According to DeFiLlama, Aave’s TVL fell about $8B from roughly $26.4B to $18.6B after a $293M Kelp DAO hack. Lookonchain said attackers used drained 116,500 Kelp DAO rsETH tokens as collateral on Aave v3, creating about $195M bad debt and triggering withdrawals. AAVE fell nearly 20% to about $89.5. Aave froze rsETH markets on v3 and v4.
How this was made

The 30-second read
Why it matters
The exploit generated about $195M in bad debt, drove Aave TVL down from ~$26.4B to ~$18.6B, and forced Aave to freeze rsETH markets on v3 and v4, while multiple connected protocols paused bridge activity.
Market read
Aave is experiencing a concrete DeFi credit event with quantified bad debt, TVL drawdown, and protocol-level freezes, which can drive further liquidation and withdrawal dynamics.
What to watch
The article notes Aave’s “Umbrella” security model stress test and prior risk-provider separation; traders should watch whether the bad-debt is contained or expands as liquidity returns and borrows are repaid.
Background
Kelp DAO attackers allegedly drained 116,500 rsETH tokens via a LayerZero-powered bridge and used them as collateral on Aave v3.
Ticker impact
Aave’s TVL fell about $8B after a Kelp DAO exploit used stolen rsETH as collateral, creating ~$195M bad debt and triggering withdrawals.
Bearish near-term bias; volatility elevated as utilization hits 100% in USDT/USDC pools and withdrawals accelerate.
The article cites concrete mechanics (bridge drain, collateralized borrowing, bad debt size) plus Aave’s response (freezing rsETH markets) and a sharp AAVE token drawdown (~20% in ~25 hours).
Market effects
Highlights systemic credit-risk contagion in DeFi lending when a single collateral asset (rsETH) is compromised, prompting coordinated bridge pauses.
No specific regional impact described; primarily crypto market-wide risk sentiment.
Cross-protocol effects (LayerZero bridge, rsETH collateral) can spill into broader DeFi liquidity and stablecoin lending confidence globally.
Counterpoint
Aave froze rsETH markets and claims rsETH remains fully backed on mainnet, which could limit ultimate lender losses versus the initial bad-debt headline.
Key entities
- DeFi lending protocolAave
Decentralized lending platform whose TVL and token price were hit after rsETH collateral was exploited.
- DeFi protocolKelp DAO
Bridge-related actor whose rsETH tokens were drained and then used as collateral on Aave.
- Blockchain interoperability protocolLayerZero
Bridge infrastructure reportedly exploited to move stolen rsETH tokens.
- Staked-asset tokenrsETH
Collateral asset whose markets were frozen on Aave after the exploit.
- Crypto exchangeMEXC
Named as a large single withdrawer from Aave.

