On April 18 a forged LayerZero message drained 116,500 rsETH (~$292M) from a Kelp DAO adapter, $123.7M to $230.1M of bad debt landed on Aave Core and five L2s, and within nine days a coalition called
2026-05-01 - 8 min read
$292M of rsETH gone in a single block. $123.7M to $230.1M of bad debt distributed across Aave's Ethereum Core and every major L2 deployment. WETH liquidity on Aave Core falling from $689M to $1.5M in less than ninety minutes. And nine days later, without a regulator, a court, or a single taxpayer in the loop, a coalition called DeFi United had pledged $160M of a $200M target to make depositors whole. Here is the punchline. The bailout worked. DeFi, as a system, has not. Native on-chain TVL has been roughly flat for twelve months while the only growth line has been off-chain Treasuries plumbed onto a public ledger. PeckShield clocked $4.04B in 2025 exploit and scam losses, the worst year on record; Chainalysis pegged theft alone at $3.4B , with North Korea responsible for $2.02B . The Aave WETH borrow rate has converged to roughly the 3-month US Treasury yield. The implied DeFi premium has compressed, in places inverted, and the marginal new dollar of yield in the system is a tokenised T-bill. This is what "the system underneath the bailout" looks like. At Exa we run non-custodial, on-chain treasury for foundations and DAOs. Smart-contract risk is not a footnote in our underwriting; it is the first page of the model. April 18 was a real-world stress test for every assumption in that model. What actually happened on April 18 The exploit was not a smart contract reentrancy. It was a cross-chain message authenticity failure . A forged LayerZero packet was delivered to a Kelp DAO adapter contract; the contract treated the message as legitimate and minted/released 116,500 rsETH (≈ $292M at the prevailing rsETH/ETH price) to the attacker. Within 46 minutes Kelp's pauseAll guardian was active. Aave's Risk Council froze rsETH and wrsETH listings across twelve deployments in the same hour. It wasn't enough. Borrowers who had taken WETH out of Aave against rsETH or wstETH collateral were caught between a paused asset and an opening borrow window. WETH utilisation on Core hit 100% within the hour; available WETH liquidity collapsed from $689M to roughly $1.5M . The same dynamic repeated, in smaller form, across Arbitrum, Base, Mantle, and Linea. By 02:28 UTC on April 19 , Aave's Risk Council had frozen WETH itself on Core, Prime, Arbitrum, Base, Mantle, and Linea. By 14:30 UTC, Risk Stewards had executed a Slope-2 cut to 1.50% on L2 WETH and 3.0% on Core, a structural change to the rate curve that capped the punitive utilisation spike at the cost of essentially halting net new borrowing. The Aave rsETH Incident Report (governance post #24580, April 20) put gross bad debt at $123.7M under uniform socialisation and $230.1M under L2-isolated allocation , a wide range driven entirely by who, exactly, eats the residual. The DeFi United coalition What followed is the part nobody had a precedent for. Within a week, a coalition of protocols, foundations, founders, and individual whales, assembled under the banner DeFi United , pledged the equivalent of $160M in ETH and stETH to absorb the bad debt and unfreeze the markets. Not a bailout in the TARP sense. Not a write-down distributed pro-rata across depositors. A voluntary, multi-party donation. Three things about this list deserve more attention than they have been getting: Mantle's 30,000 ETH is structured as a loan , not a gift. So is Compound's 3,000. The headline number ($160M) treats donations and credit facilities as if they were fungible, they are not. Roughly $94M of the $160M is reversible if the underlying recipient cannot repay. Stani Kulechov pledged 5,000 ETH personally. Joe Lubin and ConsenSys pledged 30,000. These are the founder-class commitments that make institutional readers re-rate the seriousness of the response. Stani has done variants of this before; ConsenSys at this scale is the unusual line. The Ethereum Foundation did not contribute. Asked privately, the answer was "the budget is not allowed for this." That is the right answer. It is also a tell about how this kind of remediation gets institutionalised, or doesn't, going forward. Does the math work? This is the question every allocator should be asking, and very few are. The answer is conditional : it depends on which of two allocation paths Kelp DAO chooses. Uniform socialisation spreads the loss across all rsETH/wrsETH depositors and across the protocol fee pool. $123.7M of bad debt against $160M pledged. Fully covered, with margin. Politically clean. Cosmetically clean. L2-isolated keeps each market's losses on its own balance sheet. $230.1M of total bad debt, most of it concentrated in Mantle (9.5–71% shortfall band depending on assumptions) and Arbitrum. $160M pledged. Roughly $70M shortfall. Cleaner from a markets-discipline standpoint. Politically harder. As of 1 May 2026, Kelp DAO has not finalised the allocation. WETH on Aave's Ethereum Core has been unfrozen, but at LTV = 0 , which means the market is open for repayment, not for new borrowing. Prime is still frozen. Arbitrum, Base, Mantle,