Skip to content
DeFi Exploit Triggers $300M Recovery Efforts Amid Major Protocol Fallout

DeFi Exploit Triggers $300M Recovery Efforts Amid Major Protocol Fallout

First seen 28 Apr 2026, 02:05 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •April 29, 2026 at 01:28 UTC
  • •A $292 million exploit on KelpDAO's rsETH token caused severe liquidity issues in DeFi.
  • •DeFi United has raised over $300 million to support recovery efforts, with major contributions from Consensys.
  • •Aave experienced over $12 billion in outflows, highlighting the exploit's significant impact on the DeFi ecosystem.

On April 18, 2026, a $292 million exploit targeted KelpDAO's rsETH token, exploiting a vulnerability in its LayerZero bridge configuration. Attackers redeemed unbacked rsETH tokens on Ethereum and used them as collateral on major DeFi platforms like Aave, leading to significant liquidity issues. In response, the DeFi United initiative has raised over $300 million to support recovery efforts, with contributions from notable entities including Consensys and Joseph Lubin. Aave has experienced over $12 billion in outflows, and total value locked in DeFi has dropped from $110 billion to $82 billion. The exploit has raised concerns about the stability of decentralized finance and the interconnectedness of blockchain ecosystems. Solana's intervention by deploying treasury funds into Aave marks a significant cross-chain collaboration to restore confidence in the DeFi sector. The recovery efforts aim to normalize market conditions and restore backing for rsETH.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 170d ago How this analysis works

Timeline

2026-04-18
KelpDAO rsETH exploit occurs, leading to $292 million loss.
2026-04-25
Solana Foundation announces support for Aave recovery efforts.
2026-04-27
DeFi United raises over $300 million for recovery, including 30,000 ETH.

More articles in this cluster (2)

Following this threat?

Track Kelp and DeFi United in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed