The decentralized financial ecosystem is facing a crisis of confidence that has triggered massive withdrawals of approximately 15 billion dollars from the Aave protocol. Between last Saturday and this Wednesday, the platform experienced a drop in total supply from 45.8 to 30.8 billion, according to Aavescan data. This capital flight is a direct response to the vulnerability detected in the Kelp DAO rsETH bridge, which was operated using LayerZero technology.
The crisis originated after the drainage of 116,500 rsETH valued at about 293 million dollars by an external attacker. The exploiter used a forced arbitrage strategy by performing the deposit of 89,567 rsETH to obtain loans within Aave, transferring the insolvency risk directly to the protocol’s liquidity pools. This movement generated bad debt that, depending on the final resolution regarding loss allocation, could range between 123 and 230 million dollars.
The systemic impact of rsETH and liquidity fragmentation
This event reveals a structural vulnerability in the architecture of liquid restaking derivatives (LRTs) when used as collateral. As the Aave v3 Wrapped Ether market reached 100% utilization, the liquidity available for immediate withdrawals completely disappeared during Tuesday, as reported by Talos. The inability to exit positions during periods of high volatility creates a feedback loop where lack of liquidity feeds panic, forcing users to seek more stable alternatives.
Unlike previous crises in the DeFi sector, the current problem does not lie solely within Aave’s code but in the interconnection of risks between restaking and lending layers. Analyst Tanay Ved emphasizes that using assets that bundle risks from multiple protocols allows a bridge failure to affect the entire system. This situation has benefited direct competitors; for instance, SparkLend increased its total value locked by 1.3 billion dollars since the conflict began.
The flow of funds indicates that capital is not leaving the sector but migrating toward protocols with collateral frameworks less exposed to volatile restaking assets. Meanwhile, the Kelp DAO exploit attacker moves 175 million dollars in Ether, maintaining pressure on risk managers to decide how to socialize the losses. In the blockchain network, the traceability of these funds confirms that a significant portion still remains under the exploiter’s control in wallets identified by on-chain analysts.
Aave’s governance reacted by unfreezing WETH reserves on the Ethereum Core V3 market during Tuesday. However, reserves on second-layer networks such as Arbitrum, Base, Mantle, and Linea remain frozen, limiting the operations of thousands of retail users. The community is now debating two critical scenarios: distributing losses among all rsETH holders on the mainnet or concentrating the impact solely on layer-2 users.
Polymarket prediction data reflects that only 20% of traders bet on total socialization of losses on the Ethereum mainnet. The market awaits an official resolution from Kelp DAO to determine if the liquidity deficit will be absorbed by the protocol or if Aave depositors will face a direct haircut on their balances. The next key milestone will be the governance vote on bad debt management, which will set the precedent for future incidents involving restaking assets.
This article is for informational purposes and does not constitute financial advice.

