TL;DR
- Aave’s supplied balance fell from $45.8 billion to $30.8 billion after the Kelp Dao exploit, driving roughly $15 billion in withdrawals from the lending protocol.
- The incident left Aave facing a potential rsETH-linked shortfall of about $123 million to $230 million, depending on how losses are ultimately allocated.
- SparkLend’s TVL rose by $1.3 billion, suggesting some capital rotated rather than exited DeFi even as confidence in interconnected lending markets weakened.
Aave has shed roughly $15 billion in deposits since Saturday, turning a single exploit elsewhere in DeFi into a full-scale test of lender confidence. The speed of the withdrawal wave is what makes this episode so striking, because it shows how fast users flee when uncertainty starts touching collateral quality and solvency. Total value supplied on the protocol fell from $45.8 billion to $30.8 billion by Wednesday, after the Kelp Dao bridge exploit drained about 116,500 rsETH worth roughly $293 million and sent part of the stolen funds into borrowing activity on Aave across lending markets.
The resulting stress did not come from rumor alone. Aave is now confronting a shortfall tied to 89,567 rsETH deposited on the platform, with the eventual bad-debt outcome still hanging on how losses are allocated. The exposure could land near $123 million if losses are spread across rsETH holders on Ethereum mainnet and layer-2 networks, or rise to about $230 million if the shortfall is pushed entirely onto layer-2 users. That uncertainty helped trigger fears of contagion and accelerated a broader retreat within days across the protocol as users reassessed risk in real time.
The exploit is exposing how tightly DeFi markets are connected
The episode has also revealed how quickly one compromised asset can strain a much wider lending system. What began as a bridge exploit soon became a liquidity problem, with Aave’s v3 WETH market briefly hitting 100% utilization and leaving no liquidity available for immediate withdrawals for users. Aave later unfroze WETH reserves on Ethereum Core v3, allowing users to supply WETH again, but WETH reserves on Ethereum Prime, Arbitrum, Base, Mantle, and Linea remained frozen. That uneven reopening underscored how the protocol was trying to contain pressure without pretending the system was already back to normal.
Capital has not disappeared from DeFi entirely, but it is clearly moving this week. Some of the money leaving Aave appears to be rotating rather than exiting, which suggests users are still seeking lending exposure, just not under the same cloud of uncertainty. SparkLend’s total value locked rose by $1.3 billion after the exploit, signaling that it absorbed part of the capital withdrawn from Aave. The larger lesson is uncomfortable: restaking, bridging, and lending are now intertwined tightly enough that one failure can shake confidence across the stack and force billions into sudden motion.
