Key Points
- KelpDAO’s rsETH bridge suffered a $292–$293 million security breach, sparking massive withdrawals from Aave totaling over $15 billion.
- Critical Aave lending pools reached 100% utilization rates, trapping approximately $5 billion in USDT and USDC with withdrawal functions disabled.
- Protocol TVL collapsed from $48.5 billion to roughly $30.7 billion — representing a decline of about 37% within days.
- Security expert Natalie Newson from CertiK stated that Aave’s “self-defense systems are down,” allowing bad debt accumulation to continue unchecked.
- The AAVE token currently trades around $91, maintaining position just above critical support at $90.47, facing resistance near $98.80.
Aave, recognized as one of DeFi’s premier decentralized lending platforms, now confronts an unprecedented liquidity emergency following a security incident on an external protocol that set off a devastating cascade effect across its primary markets.

The crisis began unfolding on April 18 when malicious actors identified and exploited a critical weakness in a LayerZero V2 bridge connecting Unichain to Ethereum. This security gap enabled them to extract approximately $293 million in rsETH from Kelp DAO while failing to burn equivalent tokens on the originating blockchain.
The compromised tokens were subsequently deposited into Aave V3, where they served as collateral. Leveraging these assets, the exploiter borrowed close to $200 million in WETH. As details of the unbacked collateral emerged, panic ensued and depositors rushed to extract their funds.
Within a single 24-hour period, more than $6.6 billion evacuated Aave. High-profile entities including Justin Sun and MEXC exchange were identified among those withdrawing substantial amounts. The ETH lending pool reached 100% utilization initially, with USDT and USDC markets quickly following suit.
When a lending protocol achieves 100% utilization, it indicates zero available liquidity remains. Under these conditions, user withdrawals become impossible, and the platform cannot execute liquidation procedures.
DeFi analyst DeFi Warhol clarified the situation bluntly: “It actually means no liquidity available for withdrawals. Liquidations can’t be processed.” He noted that approximately $3 billion in USDT and $2 billion in USDC remain trapped without viable exit options.
Protocol Defense Mechanisms Offline
Natalie Newson, serving as senior blockchain security researcher at CertiK, characterized the circumstances as placing Aave in a precarious position.
“100% utilization doesn’t just mean a lack of liquidity; it means the protocol’s self-defense systems are down,” she explained. In the absence of available liquidity, undercollateralized loans cannot be liquidated, resulting in continuous bad debt accumulation.
Newson emphasized that Aave itself wasn’t directly compromised. “It got stuck due to the fallout from someone else’s bridge failure,” she noted. LlamaRisk projected potential bad-debt scenarios spanning from $123.7 million to $230.1 million.
Aave’s governance responded swiftly — implementing freezes on rsETH reserves, reducing loan-to-value ratios to zero, and modifying interest rate structures. However, the TVL erosion had already occurred.
Funds Migrate to Rival Platforms
AmberCN documented on April 22 that cumulative outflows from Aave across three and a half days totaled $15.1 billion. Total value locked plummeted from $48.5 billion to $30.7 billion.

Morpho experienced $1.5 billion in withdrawals. SparkLend, conversely, absorbed $1.3 billion in new deposits — with speculation suggesting some capital originated from the same large holders exiting Aave.
Aave’s blockchain-based revenue declined from $1.1 million in early February to $625,000 as of Monday.
When approached by CoinDesk for commentary, Aave founder Stani Kulechov responded: “I do not have anything useful to say.”
The AAVE token is currently valued at approximately $91.22, positioned marginally above crucial support at $90.47. Overhead resistance exists at the 20-day EMA around $98.80.


