Aave (AAVE) Suffers $15B Outflow After KelpDAO Bridge Exploit Paralyzes Markets

TLDR

• KelpDAO’s rsETH bridge suffered a $292–$293 million security breach, sparking massive withdrawals from Aave totaling over $15 billion.
• Critical lending pools reached 100% utilization, effectively trapping approximately $5 billion in USDT and USDC with withdrawals impossible.
• Platform TVL plummeted from $48.5 billion to roughly $30.7 billion — losing nearly one-third of its value within days.
• Security expert Natalie Newson from CertiK noted Aave’s “self-defense systems are down,” allowing bad debt accumulation to continue unchecked.
• The AAVE token hovers around $91, barely maintaining support above $90.47, while facing resistance near $98.80.

A devastating liquidity crunch has engulfed Aave, a leading decentralized finance lending protocol, following a security exploit on an external platform that unleashed a cascade of withdrawals, effectively paralyzing its primary markets.

The crisis began unfolding on April 18 when malicious actors identified and exploited a critical flaw in a LayerZero V2 bridge connecting Unichain and Ethereum. This vulnerability enabled them to siphon approximately $293 million in rsETH from Kelp DAO while failing to burn the matching tokens on the originating blockchain.

The compromised tokens were subsequently deposited into Aave V3 as loan collateral. Exploiting this position, the attacker borrowed close to $200 million in WETH. Once the community discovered this unbacked collateral, a rapid withdrawal stampede commenced.

(1/2 ) $AAVE signals around the Kelp exploit discovered with Claude via Santiment MCP:
Whale transactions (>$100K) spiked from 2–6 per hour to 43 within ~90 min of the exploit.
Exchange inflows went from ~$38K to $3M within ~90 min, peaking at $8.5M on Sat afternoon.
… pic.twitter.com/sKI9U5uyju

— Santiment (@santimentfeed) April 20, 2026

Within a single 24-hour period, more than $6.6 billion evacuated from Aave. Notable withdrawals came from high-profile entities including Justin Sun and cryptocurrency exchange MEXC. The ETH lending pool reached critical 100% utilization initially, with USDT and USDC markets following shortly after.

When a lending platform hits 100% utilization, it signifies complete liquidity exhaustion. This state prevents user withdrawals entirely and eliminates the protocol’s ability to execute liquidations on underwater positions.

DeFi analyst DeFi Warhol offered a straightforward assessment: “It actually means no liquidity available for withdrawals. Liquidations can’t be processed.” He further noted that approximately $3 billion in USDT and $2 billion in USDC remain trapped without viable withdrawal options.

Protocol Defense Mechanisms Completely Disabled

CertiK’s senior blockchain security analyst Natalie Newson emphasized the gravity of Aave’s predicament.

“100% utilization doesn’t just mean a lack of liquidity; it means the protocol’s self-defense systems are down,” she explained. With zero available liquidity, positions lacking adequate collateral cannot be liquidated, allowing bad debt to accumulate continuously.

Newson clarified that Aave itself wasn’t directly compromised. “It got stuck due to the fallout from someone else’s bridge failure,” she stated. Risk assessment firm LlamaRisk projected potential bad-debt scenarios spanning from $123.7 million to $230.1 million.

Aave’s governance responded swiftly — implementing freezes on rsETH reserves, reducing loan-to-value parameters to zero, and modifying interest rate curves. However, the TVL hemorrhage had already occurred.

Competing Protocols Capture Fleeing Capital

According to AmberCN’s April 22 analysis, cumulative outflows from Aave across three and a half days totaled $15.1 billion. The platform’s TVL collapsed from $48.5 billion down to $30.7 billion.

Morpho experienced $1.5 billion in withdrawals during the same period. Conversely, SparkLend attracted $1.3 billion in new deposits — with speculation that some capital originated from large holders fleeing Aave.

Daily on-chain revenue for Aave declined from $1.1 million in early February to just $625,000 as of Monday.

When approached by CoinDesk for commentary, Aave founder Stani Kulechov responded tersely: “I do not have anything useful to say.”

The AAVE token is currently trading around $91.22, precariously positioned above critical support at $90.47. Immediate resistance lies at the 20-day EMA approximately $98.80.

The post Aave (AAVE) Suffers $15B Outflow After KelpDAO Bridge Exploit Paralyzes Markets appeared first on Blockonomi.