Danyunder@danyundercrypto
The @KelpDAO $293M exploit just wiped $13.2 BILLION from DeFi.
Here's the damage by the numbers 🧵
DEFI GLOBAL:
→ Total TVL: $99.5B → $86.3B (-7% in 24h)
→ One single exploit. One bad bridge config.
AAVE (the real casualty):
→ TVL: $26.4B → $18.6B (-$7.8B)
→ Lost its #1 spot in DeFi
→ $6.6B withdrawn in 24 hours ($3.3B in stablecoins)
→ Bad debt: $177M–$196M
→ USDT/USDC pools now at 100% utilization
→ $5.1B in stables STUCK — only $2,540 available in the $2.87B USDT pool
→ Borrow rates spiked to 15% | Deposits to 13.4%
→ $AAVE token: -20%
THE rsETH DAMAGE:
→ 116,500 rsETH stolen (18% of circulating supply)
→ rsETH price crashed to $1,464 (ATL, from $2,500+)
→ 20+ chains with uncertain backing
WHO ELSE GOT HIT:
→ @compoundfinance + @eulerfinance: combined $236M bad debt exposure
→ @sparkdotfi , @0xfluid , @upshift_fi : rsETH markets frozen
→ @LidoFinance earnETH: deposits paused
→ @ethena : paused LayerZero OFT bridges as precaution
→ @Morpho: only $1M exposure (isolated markets architecture saved them)
THE ATTRIBUTION:
@LayerZero_Core confirmed: Lazarus Group (DPRK) / TraderTraitor
Root cause: Kelp ran a 1/1 DVN config, a single point of failure.
LayerZero had warned them. They ignored it.
CONTEXT:
→ Largest DeFi hack of 2026 (overtook Drift's $285M from April 1)
→ 2026 cumulative DeFi losses: $450M–$482M across ~45 protocols
→ $ZRO: -22%
THE LESSON:
DeFi composability is a double-edged sword. A bridge misconfiguration on one protocol can drain $13B from the entire ecosystem in 24 hours.
Morpho's isolated markets ($1M exposure) vs Aave's monolithic pools ($196M bad debt), the architecture debate just got real.
