AAVE Drops 26% as Kelp DAO's $292M Exploit Triggers $9B DeFi Outflows
A $292M exploit on Kelp DAO sent AAVE's governance token down 26% and triggered $9B in net DeFi outflows on April 21, 2026, highlighting the systemic risks of liquid restaking tokens used as collateral across lending markets.
AAVE Drops 26% as Kelp DAO's $292M Exploit Triggers $9B DeFi Outflows
A $292 million exploit targeting restaking protocol Kelp DAO over the weekend of April 21, 2026 sent AAVE's governance token down 26% and flushed an estimated $9 billion in net outflows from decentralized finance platforms, making it one of the sharpest single-protocol contagion events in recent DeFi history.
Kelp DAO is a liquid restaking protocol that lets users deposit assets and receive tokenized representations of their staked positions. Those tokens circulate across DeFi lending markets, including Aave, as collateral. When the exploit drained $292 million from Kelp DAO's contracts, confidence in those collateral tokens collapsed almost immediately, prompting a cascade of withdrawals from dependent protocols.
NewsBTC reported that Aave emerged as one of the hardest-hit platforms, with the contagion "rippling through decentralized finance lending and market confidence far beyond the original incident." The $9 billion in net outflows was not confined to Kelp DAO itself. Capital fled Aave and other lending platforms as users rushed to de-risk positions, unwind collateralized debt, and move funds to cold storage or centralized exchanges. This reflexive withdrawal is a known failure mode in DeFi: when collateral assets lose credibility, rational actors pull liquidity before others can, accelerating the very crisis they fear.
The pattern has clear historical precedent. The March 2022 Ronin Bridge hack drained $625 million from Axie Infinity's sidechain infrastructure and triggered widespread panic selling across play-to-earn tokens and associated DeFi positions. Lending protocol exploits in 2023 and 2024 produced similar ripple effects, where a breach in one corner of an interconnected system exposed fragility across the whole. Restaking protocols carry particular systemic risk because they sit upstream of lending markets: their tokens serve as collateral, meaning a single exploit can simultaneously impair multiple downstream platforms.
Cardano founder Charles Hoskinson commented on the incident via Reddit's r/cardano community, framing the hack within a broader critique of DeFi security architecture rather than offering specific remediation analysis. His commentary reflects a recurring debate about whether the composability that makes DeFi powerful also makes it structurally fragile under adversarial conditions.
There are reasons to resist reading Aave's 26% token decline as a signal of protocol insolvency. Aave's multi-collateral design includes risk parameters that can limit exposure to any single asset class, and a falling governance token does not mean user funds are at direct risk. Aave's treasury, safety module, and liquidation mechanisms exist precisely to absorb shocks of this kind. Historically, DeFi markets have recovered meaningfully once the scope of a contagion event is quantified and remediation timelines become clear. The speed of the sell-off may reflect panic more than a precise accounting of Aave's actual exposure to Kelp DAO collateral.
The $9 billion outflow figure is not a paper loss. It represents real capital leaving DeFi protocols, reducing total value locked (TVL, the aggregate assets deposited across DeFi platforms) and shrinking the fee revenue and liquidity depth that make these protocols functional. Lower TVL means thinner order books, wider spreads on liquidations, and reduced protocol income, all of which pressure governance token valuations independently of any direct hack exposure.
The Kelp DAO incident adds to a growing body of evidence that liquid restaking tokens (LRTs) introduce systemic risk that DeFi has not yet priced adequately. As restaking protocols proliferated following Ethereum's EigenLayer launch and the broader restaking narrative of 2024 and 2025, their tokens became deeply embedded in lending markets as collateral. A single exploit at the restaking layer can now propagate losses across every lending market that accepted those tokens. Risk teams at major protocols will likely spend the coming weeks reassessing collateral parameters for LRT assets, and governance proposals to tighten those parameters should be expected across multiple platforms in the near term.



