DeFi TVL sheds $14B after bridge hack

TLDR

DeFi total value locked has dropped about $14 billion after a major KelpDAO bridge exploit triggered a wave of withdrawals across lending protocols.

1. KelpDAOs rsETH bridge was exploited for roughly $292300 million, and DeFi TVL fell from about $99.5 billion to roughly $85 billion within two days.
2. Because rsETH was widely used as collateral, fear of bad debt and bridge risk caused a bank run style exit from Aave and other protocols across multiple chains.
3. The next key signals are how Aave and KelpDAO handle losses, how bridge and liquid restaking risks are tightened, and whether TVL stabilizes or continues rotating into perceived safer venues.

Deep Dive

1. Key Facts On The TVL Drop

KelpDAOs rsETH liquid restaking token, which used a LayerZero-powered cross chain bridge, was exploited when an attacker forged a valid looking message that released 116,500 rsETH, worth about $292300 million, without backing tokens leaving the origin chain. Reports detail how the attacker then deposited this rsETH into Aave to borrow real ETH and other assets, leaving protocols with unbacked collateral and potential bad debt.

Data compiled by DeFiLlama and cited by several outlets shows total DeFi TVL falling from around $99.49 billion to about $85.32 billion, a roughly $14.17 billion slide, within roughly 2448 hours of the exploit, with Aave alone seeing withdrawals of about $910 billion and a TVL drawdown of more than 30 percent. Ethereum, the largest DeFi chain, and other networks like Solana, Arbitrum, Base, and Mantle all recorded sizeable TVL declines in the same window.

2. Why A 300M Hack Cut 14B Of TVL

The direct theft was under $300 million, but rsETH had been widely whitelisted as high quality collateral across Aave and many other lending and restaking protocols. Once it became clear that a large chunk of rsETH was effectively unbacked, those positions turned into toxic or at least highly uncertain collateral.

That uncertainty triggered a classic flight to safety: ETH and stablecoin suppliers rushed to withdraw from Aave and related protocols before any losses were socialized, while other projects with LayerZero or rsETH exposure froze markets or bridges, amplifying risk aversion across DeFi. As more users questioned bridge and liquid restaking design, capital left not just directly affected markets but the broader sector, producing a TVL loss many times larger than the initial exploit.

3. What To Watch From Here

First, governance outcomes matter. Aaves community and KelpDAO still need to decide how to allocate the bad debt, with scenarios ranging from spreading losses across rsETH holders to concentrating them on certain networks or using Aave treasury funds. Those choices will heavily influence whether confidence returns or further withdrawals continue.

Second, infrastructure and collateral policy are likely to tighten. LayerZero and KelpDAO are already disputing responsibility, and other teams are freezing or reviewing LayerZero-based bridges and LRT collateral whitelists. Expect higher demand for multi-verifier bridge designs, stricter risk parameters for restaking tokens, and possibly more regulatory focus on cross chain infrastructure.

Third, watch whether DeFi TVL stabilizes around the mid-80 billions or keeps falling, and where capital rotates. Early data suggests some flows into large caps and into chains and protocols perceived as less entangled with risky restaking and bridge setups, while more experimental DeFi sees the sharpest outflows.

Conclusion

A single cross chain exploit in KelpDAOs rsETH bridge has turned into a sector wide stress test, wiping roughly $14 billion from DeFi TVL as users reprice bridge and collateral risk. The hack exposed how deeply interconnected lending, restaking, and messaging protocols are, and how quickly confidence can vanish when one link fails. Over the next weeks, the durability of DeFi will depend on how fast governance processes resolve bad debt and how seriously teams redesign bridges and collateral rules to prevent a repeat of this kind of cascading shock.