The ETH market on Aave was affected after the theft of 292 million rsETH on Kelp DAO.
The decentralized finance ecosystem faces a crucial test following the security breach suffered by Kelp DAOAn exploit in their bridge Cross-chain allowed the drainage of approximately $292 million in rsETH assetsgenerating an immediate contagion effect. The most visible case is that of Aave, where the Ethereum pool has reached a utilization rate of 100%.
It is crucial to clarify that this incident is not due to a flaw in Aave's code; the protocol's contracts have not been exploited at all. However, the current protocol outage is the result of a chain reaction where an external asset has lost its integrity, forcing the project to activate its defense mechanisms to protect users.
Trade crypto securely at Bit2MeThe exploit in Kelp DAO
To understand the situation Aave is facing, we must look at Kelp DAO's infrastructure. On April 18, a breach in the custody of private keys allowed an attacker to manipulate the bridge connecting different networks.
According to technical reports from analysts at D2 Finance, the operator achieved issue rsETH tokens without real backing on the source chain. With these assets under his control, the attacker targeted Aave to use them as collateral and extract legitimate liquidity.
Aave's response has been decisive in mitigating the damage. The official team confirmed that the rsETH markets on Aave V3 and Aave V4 have been frozen immediately. This measure prevents new deposits and any attempts to borrow using rsETH as collateral while the full extent of the attack is assessed. According to Lookonchain data, the attacker's maneuver involved depositing the compromised rsETH to withdraw real Ethereum, leaving the protocol with a burden of loans that now lack solid backing.
Aave faces the 100% ETH utilization wall
When Ethereum utilization on Aave reaches 100%, it means there is no ETH available for withdrawals or new loans. This operational freeze occurred because, after the Kelp DAO exploit was discovered, major liquidity providers withdrew their funds to mitigate risk.
Wallets linked to Justin SunFor example, 65.584 ETH were withdrawn—equivalent to about $154 million. This massive exodus emptied the pool in a matter of minutes, a logical response in markets where liquidity is the absolute priority.
The Aave team is currently reviewing all rsETH loans that occurred immediately after the exploit. The goal is to identify how much "bad debt" has been generated. If the protocol is accumulating deficits due to this incident, management has already... release which will explore various avenues for compensate for any lack of funds.
In the DeFi ecosystem, this transparency aims to reassure ETH depositors who are currently unable to withdraw their assets. The system is designed so that, upon full utilization, interest rates will rise sharply, incentivizing borrowers to repay their loans and release the necessary liquidity to normalize withdrawals.
Explore the potential of crypto hereThe systemic risk of restaking assets
The recent security breach linked to the Kelp DAO protocol has highlighted the fragility that still surrounds the liquid restaking tokens within the DeFi ecosystem. Although Aave does not have vulnerabilities in its lending system, the incident reveals how risks can spread when different protocols are connected to each other.
When an external bridge fails, the asset passing through it inherits that problem. If that same asset is used as collateral within another protocol, the effect is amplified and compromises more participants. Security specialists associated with LayerZero Core have reiterated that the solutions Cross-chain They remain one of the most sensitive points in the current crypto infrastructure.
However, Aave has made it clear that its priority is the solvency of the system. By freezing the rsETH markets, they have cut off the flow of the damaged asset, protecting the rest of the liquidity pools.
The governance community is now monitoring the situation to decide whether to activate security modules to address the shortfall. This event serves as a critical reminder: in the DeFi environment, the robustness of a lending platform depends entirely on the security of the assets it chooses to integrate into its vaults.
Certificate
Blockchain Course
Basic levelTake this course where we explain blockchain in a clear, simple and concise way so that you have a very clear idea of what this new technology consists of.
