Aave Grapples With Up to $200M Bad Debt, WETH Liquidity Crunch After KelpDAO rsETH Bridge Exploit
Aave is dealing with a liquidity squeeze and an estimated $177 million to $200 million in bad debt after an exploit tied to KelpDAO's rsETH rippled through the lending market.
Attackers siphoned 116,500 rsETH from Kelp's bridge on April 18, 2026, then supplied the tokens to Aave V3 as collateral and borrowed wrapped ether (WETH) against them. After KelpDAO paused rsETH contracts in response, the collateral backing those loans effectively became unmarketable, leaving positions that could not be meaningfully liquidated and pushing losses onto Aave's WETH reserves.
Market estimates put the total borrowed value affected across Aave's exposure, plus smaller spillovers on Compound and Euler, at up to $200 million or more. Aave said its own smart contracts were not exploited, describing the incident as specific to rsETH.
Aave moved quickly to contain further risk. The protocol froze rsETH markets on Aave V3 and V4, removed borrowing power against the asset, and set loan-to-value parameters to zero on impacted deployments. Founder Stani Kulechov said rsETH had been frozen across both versions and that Aave had no further exposure to the asset following the KelpDAO bridge exploit that occurred outside the protocol.
Even with new rsETH activity halted, users rushed to pull funds. Reports said ETH and WETH withdrawals totaled about $5.4 billion within hours, driving the Aave WETH pool to 100% utilization. At full utilization, available liquidity is exhausted, preventing suppliers from redeeming because nearly all assets are tied up in outstanding loans.
Stablecoin markets also came under strain. Although USDC and USDT pools had no direct rsETH exposure, broad risk-off withdrawals pushed utilization higher in some deployments, with users reporting failed or delayed redemptions as liquidity thinned.
Aave's total value locked fell to about $19.776 billion from roughly $26.4 billion, a 24.11% drop as of April 19 based on DefiLlama data. The AAVE token slid 17.7% on April 19 as markets priced in uncertainty around losses and the potential implications of a backstop activation.
Aave's "Umbrella" system is designed to address bad debt events. If losses are confirmed, it can draw on reserves and may include slashing staked AAVE depending on the size and structure of the deficit. The impact on stakeholders remains under assessment.
Protocols linked through overlapping liquidity flows, including Sparklend, reportedly saw rate spikes and temporary pauses as capital rotated away from affected markets. As of April 19, there were no reports of additional exploits or a widening of the incident.
Utilization in Aave's ETH markets remains elevated, and normal withdrawal access will likely depend on outflows easing or on an Umbrella resolution that settles bad debt and restores confidence. The next steps are expected to focus on finalizing a bad-debt review, issuing a formal Umbrella plan, and monitoring whether liquidity stabilizes as the market digests the KelpDAO fallout.
