Aave Struggles With $195M Bad Debt Following KelpDAO Bridge Exploit

Aave's V3 and V4 markets accepted the freshly minted tokens as legitimate collateral and lent $190M in WETH and stablecoins against them. The protocol now carries approximately $195M in bad debt — a solvency event triggered by an oracle that priced the asset at par and processed the borrow without question.

How the hole got punched

The attack vector was textbook bridge exploitation. Roughly 116,500 rsETH — about 18% of total supply — were minted without backing through KelpDAO's LayerZero-powered bridge. The attacker deposited those tokens into Aave as collateral. Because the markets recognized rsETH at face value, the protocol processed the borrows like any other transaction. No oracle flagged the mint event. No circuit breaker tripped.

• Bad debt: ~$195M most cited; estimates span $124M–$230M depending on recovery assumptions
• Borrowed: $190M in WETH and stablecoins across V3 and V4
• Response: Aave froze rsETH and WETH markets immediately
• TVL drawdown: from ~$26B peak, outflows reported between $6B and $10B+

Capital flight: Aave out, SparkLend in

SparkLend had already trimmed rsETH exposure before the incident. That positioning paid off. The protocol absorbed between $1.4B and $1.7B in new deposits from users rotating to safer ground — effectively doubling its TVL within days. Fluid halted operations entirely as a precaution; multiple other platforms initiated their own market freezes.

Aave's community and DAO have moved to address the hole through a coordinated fundraising effort targeting $200M. Roughly $160M has been raised so far, with material contributions from Mantle and the AAVE DAO itself. Gap: $40M. No clear closure timeline.

Cross-chain bridges remain DeFi's largest attack vector. Ronin, Wormhole, now KelpDAO — same pattern: bridge vulnerability mints unbacked assets that propagate through integrated markets before anyone can react. Aave's price oracle treated rsETH as solvent collateral until the market froze. That oracle problem is systemic, not protocol-specific.

Verdict

Yield on rsETH markets across Aave is effectively zero until further notice. SparkLend's $1.7B in flight capital is a near-term liquidity win — but absorbing that much new TVL in a compressed window is a concentration risk the protocol didn't request. The structural fix isn't insurance funds or DAO votes. It's bridge-level verification that doesn't treat freshly minted tokens as solvent collateral. Until that changes, every major lending market with bridge-fed assets sits one mint event away from the same hole.

For users juggling cross-border logistics alongside their DeFi positions, claiming an IHS refund after a UK visa refusal is the kind of small recovery that quietly compounds.