{"id":9313,"date":"2026-08-19T20:35:19","date_gmt":"2026-08-19T17:35:19","guid":{"rendered":"https:\/\/handoli.com\/index.php\/2026\/08\/19\/aave-tvl-still-down-43-since-kelpdao-hack\/"},"modified":"2026-08-19T20:35:19","modified_gmt":"2026-08-19T17:35:19","slug":"aave-tvl-still-down-43-since-kelpdao-hack","status":"publish","type":"post","link":"https:\/\/handoli.com\/index.php\/2026\/08\/19\/aave-tvl-still-down-43-since-kelpdao-hack\/","title":{"rendered":"Aave TVL still down 43% since KelpDAO hack"},"content":{"rendered":"<div><\/div>\n<p>Aave, one of crypto\u2019s largest lending and borrowing protocols, still hasn\u2019t recovered from the April 18 hack of KelpDAO.<\/p>\n<p>Indeed, the value of all crypto assets in its smart contracts is down 43% since the attack, and 67% below its 52-week high.<\/p>\n<p>Despite KelpDAO users entrusting $26.4 billion to Aave just prior to the hack \u2014 already way down on the October 2025 peak of $45.9 billion \u2014 there\u2019s a mere <a href=\"https:\/\/defillama.com\/protocol\/aave\" target=\"_blank\" rel=\"noreferrer noopener\">$14.9 billion<\/a> worth of assets in the ecosystem today.<\/p>\n<p>North Korean hackers looted KelpDAO in mid-April, and through its acceptance of KelpDAO tokens as collateral for loans, Aave was left nursing a nine-figure loss.<\/p>\n<h2 class=\"wp-block-heading\">North Korea infected the industry<\/h2>\n<p>Despite Aave itself never being hacked, per its own <a href=\"https:\/\/governance.aave.com\/t\/rseth-incident-report-april-20-2026\/24580\" target=\"_blank\" rel=\"noreferrer noopener\">report<\/a>, its utility for lending cost it a long-held title as DeFi\u2019s biggest platform. Four months later, depositors still have cold feet.<\/p>\n<p>LayerZero, the KelpDAO bridge\u2019s software provider, blamed North Korea within 48 hours \u2014 an early call that outside investigators later <a href=\"https:\/\/layerzero.network\/blog\/layerzero-labs-kelpdao-incident-report\" target=\"_blank\" rel=\"noreferrer noopener\">confirmed<\/a>.<\/p>\n<p>KelpDAO takes deposits of ETH, stakes on Ethereum\u2019s blockchain for yield, and issues a tradeable receipt token called rsETH. The thieves parked stolen rsETH on Aave and <a href=\"https:\/\/www.dlnews.com\/articles\/defi\/aave-posts-plan-to-restore-rseth-backing\/\" target=\"_blank\" rel=\"noreferrer noopener\">borrowed<\/a> real ETH against it, leaving Aave and fellow lender Compound with an estimated $246 million of combined bad debt.<\/p>\n<p>Aave forcibly liquidated the attacker\u2019s positions, industry allies rebuilt the missing collateral, and by late May, Aave had <a href=\"https:\/\/x.com\/aave\/status\/2059008564794945552\" target=\"_blank\" rel=\"noreferrer noopener\">declared<\/a> every market back to normal.<\/p>\n<p>Nevertheless, the dollar value of its liquidity pools never recovered and Aave still sits about two-thirds below its October peak.<\/p>\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"FFb17I8dJx\"><p><a href=\"https:\/\/protos.com\/aave-dismisses-restraining-notice-for-rescued-funds-as-finders-keepers\/\">Aave dismisses restraining notice for rescued funds as \u2018finders keepers\u2019<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p><em>Read more: <a href=\"https:\/\/protos.com\/defi-sector-in-14b-meltdown-as-290m-rseth-hack-fallout-burns-aave\/\">DeFi sector in $14B meltdown as $290M rsETH hack fa<\/a><a href=\"https:\/\/protos.com\/defi-sector-in-14b-meltdown-as-290m-rseth-hack-fallout-burns-aave\/\" target=\"_blank\" rel=\"noreferrer noopener\">l<\/a><a href=\"https:\/\/protos.com\/defi-sector-in-14b-meltdown-as-290m-rseth-hack-fallout-burns-aave\/\">lout burns Aave<\/a><\/em><\/p>\n<h2 class=\"wp-block-heading\">Aave\u2019s decline matters for DeFi<\/h2>\n<p>A non-custodial lending app, Aave ended 2025 with <a href=\"https:\/\/aave.com\/blog\/aave-2025-recap\" target=\"_blank\" rel=\"noreferrer noopener\">$55 billion<\/a> in TVL, worth more than half of the DeFi lending sector\u2019s TVL.<\/p>\n<p>For a borrower, TVL isn\u2019t an abstraction. It illustrates the dollar equivalent values of deposits and inventory that borrowers can draw on.<\/p>\n<p>A pool worth 43% less has that much less to lend and much higher volatility.<\/p>\n<p>According to investigators at Chainalysis, North Korea\u2019s Lazarus Group was probably helping KelpDAO attackers while LayerZero\u2019s own <a href=\"https:\/\/layerzero.network\/blog\/layerzero-labs-kelpdao-incident-report\" target=\"_blank\" rel=\"noreferrer noopener\">post-mortem<\/a> attributed the operation to a North Korean-linked cluster going by TraderTraitor.<\/p>\n<p>Protos has also <a href=\"https:\/\/protos.com\/aave-dismisses-restraining-notice-for-rescued-funds-as-finders-keepers\/\">reported<\/a> alleged on-chain links to Bybit and BTC Turk hacks.<\/p>\n<h2 class=\"wp-block-heading\">Aave never really recovered from KelpDAO<\/h2>\n<p>Aave fell about 20% over the day after the theft, from roughly $115 to below $92. The token trades near $89 today, still slightly below its pre-hack level.<\/p>\n<p>Within two days of the hack, Aave\u2019s deposits collapsed by more than $8 billion and its stablecoin pools hit <a href=\"https:\/\/cointelegraph.com\/news\/aave-tvl-falls-8-billion-after-kelp-dao-hack\" target=\"_blank\" rel=\"noreferrer noopener\">100%<\/a> utilization, leaving billions of crypto dollars effectively frozen with no room for anyone else to withdraw stablecoins.<\/p>\n<p>On April 27, Aave <a href=\"https:\/\/x.com\/aave\/status\/2048958367658332413\" target=\"_blank\" rel=\"noreferrer noopener\">announced<\/a> that a new coalition, DeFi United, had pledged enough ETH to restore rsETH\u2019s full backing. It then <a href=\"https:\/\/x.com\/aave\/status\/2052100832834036187\" target=\"_blank\" rel=\"noreferrer noopener\">liquidated<\/a> the attacker\u2019s positions on Ethereum and Arbitrum on May 6. Replacement collateral flowed into the bridge\u2019s reserves in <a href=\"https:\/\/www.cryptotimes.io\/2026\/06\/01\/aave-restores-rseth-backing-in-full-but-71m-court-battle-drags-on\/\" target=\"_blank\" rel=\"noreferrer noopener\">tranches<\/a> through late May.<\/p>\n<p>The panic hadn\u2019t ended even by May. TVL kept draining into June, bottoming near $11.9 billion before partially recovering.<\/p>\n<p>Aave now sits near $14.9 billion, down 43% from hack day.<\/p>\n<p>According to its own report, Aave\u2019s contracts, oracles and liquidation mechanics worked exactly as designed, yet North Korea was still able to withdraw money using phony collateral.<\/p>\n<p><em>Got a tip? Send us an email securely via\u00a0<a href=\"https:\/\/leaks.protos.com\/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Protos Leaks<\/em><\/a>. For more informed news and investigations, follow us on\u00a0<a href=\"https:\/\/twitter.com\/protos\" target=\"_blank\" rel=\"noreferrer noopener\">X<\/a>,\u00a0<a href=\"https:\/\/bsky.app\/profile\/protos.com\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Bluesky<\/em><\/a>, and\u00a0<a href=\"https:\/\/news.google.com\/publications\/CAAqJAgKIh5DQklTRUFnTWFnd0tDbkJ5YjNSdmN5NWpiMjBvQUFQAQ\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Google News<\/em><\/a>, or subscribe to our\u00a0<a href=\"https:\/\/youtube.com\/protosmedia\" target=\"_blank\" rel=\"noreferrer noopener\"><em>YouTube<\/em><\/a>\u00a0channel.<\/em><\/p>\n<p>The post <a href=\"https:\/\/protos.com\/aave-tvl-still-down-43-since-kelpdao-hack\/\">Aave TVL still down 43% since KelpDAO hack<\/a> appeared first on <a href=\"https:\/\/protos.com\/\">Protos<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Aave, one of crypto\u2019s largest lending and borrowing protocols, still hasn\u2019t recovered from the April 18 hack of KelpDAO. Indeed, the value of all crypto assets in its smart contracts is down 43% since the attack, and 67% below its 52-week high. Despite KelpDAO users entrusting $26.4 billion to Aave just prior to the hack [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":9314,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":[],"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[147],"tags":[],"class_list":["post-9313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-invest"],"_links":{"self":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts\/9313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/comments?post=9313"}],"version-history":[{"count":0,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts\/9313\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/media\/9314"}],"wp:attachment":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/media?parent=9313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/categories?post=9313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/tags?post=9313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}