Crypto Borrowers Reassess DeFi After Major Security Incident
In April 2026, a security breach at Kelp DAO led to an estimated $292 million in losses after attackers exploited the protocol's cross-chain bridge. The attack involved forging messages that minted unbacked rsETH tokens and posting them as collateral on DeFi platforms like Aave. In response, several lending markets froze their rsETH positions to avoid bad debt, triggering a rapid withdrawal of over $13 billion in total value from DeFi protocols within two days. The incident highlighted the vulnerabilities inherent in decentralized finance (DeFi), particularly how trustless systems still rely on complex infrastructure like bridges and oracles. Borrowers are now reevaluating whether to use native assets, such as Bitcoin, which avoid wrapping processes that can introduce points of failure. Meanwhile, AI tools are increasingly being used both for exploitation and security auditing in the DeFi space. The breach has prompted a broader discussion about risk trade-offs between DeFi and centralized finance (CeFi). While DeFi offers faster access to capital with lower fees, it lacks legal recourse when things go wrong. CeFi platforms provide more transparency and support but come with counterparty risks as seen in past failures like Celsius and BlockFi.
Topics: crypto lending cyberattack DeFi Kelp DAO rsETH smart contracts