Aave Faces Up to $230 Million in Losses After Kelp DAO Exploit, Incident Report Finds
Unchained·60-word summary·1 min read
Aave faces potential losses of up to $230 million following the Kelp DAO exploit, according to an incident report by Aave Labs and LlamaRisk. The report estimates bad debt exposure between $124 million and $230 million, depending on how Kelp DAO handles its $292 million bridge exploit losses. The incident highlights ongoing security risks in DeFi protocols.
Chinese advanced persistent threat (APT) groups are reportedly targeting Indian banks and Korean policy circles, with limited effort indicated by outdated tactics. The activity highlights ongoing cyber espionage concerns in the region, though specific dates and amounts were not disclosed. The campaign underscores the persistent security risks facing financial and governmental sectors in Asia.
Arbitrum has frozen $71 million in ETH linked to the Kelp DAO exploit, which occurred in April 2026. The move aims to secure the funds and prevent further misuse following the security breach. The incident highlights ongoing risks within DeFi platforms and the importance of proactive security measures in the Web3 space.
Wallets linked to the $292 million Kelp DAO exploit are moving funds across chains after Arbitrum’s ETH freeze. The exploit involved a major breach, and the movement of stolen assets raises concerns about cross-chain security and the ongoing impact of the attack on DeFi protocols. Authorities and security teams monitor the situation as funds are transferred.
Arbitrum froze 30,766 ETH worth over $50 million linked to the KelpDAO hack on April 21, 2026. The attacker moved 75,701 ETH and began routing funds to Bitcoin, laundering over $176 million through multiple flows. Arbitrum's actions aim to contain the breach, but the attacker continues to push remaining assets beyond reach.
Over 6,400 Apache ActiveMQ servers are vulnerable to ongoing attacks due to a high-severity code injection flaw, according to nonprofit security group Shadowserver. The flaw, actively exploited, affects servers exposed online, raising concerns about potential security breaches. The vulnerability highlights the importance of timely patching and security measures for affected systems.
The Kelp DAO attacker has moved $175 million of stolen Ether after a $290 million exploit, according to Arkham. The hacker appears to be laundering the funds, raising concerns about security and the scale of DeFi exploits. The incident underscores ongoing risks in cross-chain DeFi protocols and the need for better security measures.