DeFi TVL drops $14B after major hacks

TLDR

DeFis total value locked has fallen roughly $1314 billion in two days after a large exploit of KelpDAOs rsETH restaking token sparked a bank-run style liquidity shock across major lending protocols.

1. A $292293 million KelpDAO bridge hack of rsETH triggered rapid withdrawals, cutting aggregate DeFi TVL from about $99.5 billion to roughly $86 billion in under 48 hours.
2. Aave (AAVE) absorbed the biggest hit, losing around $8.4 billion in TVL and accumulating significant bad debt, highlighting systemic risks from cross-chain bridges and liquid restaking collateral.
3. The key variables now are how fast protocols patch risks and recapitalize bad debt, and whether confidence returns before further exploits or forced liquidations deepen outflows.

Deep Dive

1. How The Hacks Wiped Out $14B In TVL

Multiple sources report that a KelpDAO rsETH exploit is the primary trigger for the DeFi TVL drop. Attackers used a misconfigured LayerZero-based bridge to mint about 116,500 unbacked rsETH, worth roughly $292293 million, and moved it into lending protocols as collateral.

Data compiled from DeFiLlama and reporters shows total DeFi TVL falling from about $99.49 billion to between $8586.3 billion within two days, a decline of around $13.2 billion, as users withdrew capital across chains and protocols in response to the hack and market freezes.

2. Why Aave And Restaking Took The Biggest Hit

Aaves exposure to rsETH made it the main shock absorber. Reports show Aaves TVL dropping from roughly $26.4 billion to about $1820 billion, with outflows of $58.4 billion and estimated bad debt in the $177200 million range as borrowers used worthless rsETH to pull out real ETH and stablecoins.

This event underlines structural risks: whitelisting complex liquid restaking tokens as near-ETH collateral, reliance on third-party bridge infrastructure, and highly composable money markets where one collateral failure instantly propagates across chains and strategies. Even protocols not directly hacked froze rsETH markets and saw depositors rush for the exits.

3. What To Watch Next For DeFi Users

Several things will decide whether this is a short-lived shock or a longer DeFi confidence crisis:

1. How Aave and peers resolve bad debt, including any use of safety modules or staker dilution.
2. Concrete changes to risk parameters for LRTs, bridge integrations, and cross-chain verification standards.
3. The pace of new exploits, given April has already seen over $600 million in DeFi hack losses when including the recent Drift Protocol incident.

For users, the key is to track how a protocol handles collateral whitelisting, bridge dependencies, and emergency controls, not just its headline yield.

Conclusion

The roughly $14 billion drop in DeFi TVL stems less from broad market selling and more from a concentrated failure in cross-chain restaking infrastructure that cascaded through interconnected lending markets. Whether DeFi stabilizes from here will depend on how quickly major protocols repair balance sheets and harden bridge and collateral standards before the next exploit tests the system again.