On April 18, 2026, an attacker exploited a minting flaw in KelpDAO’s rsETH token, resulting in an estimated loss of over $280 million across Ethereum and Arbitrum DeFi protocols. ZachXBT flagged the incident, which created significant bad debt on Aave V3 and highlights ongoing security vulnerabilities in DeFi lending markets.
LayerZero attributes a $290 million exploit to North Korea’s Lazarus group, blaming Kelp’s setup for the breach. The company stated that attackers compromised two RPC nodes and DDoS’d others, exploiting Kelp’s failure to follow multi-verifier security recommendations. The attack highlights vulnerabilities in decentralized infrastructure and the ongoing threat from state-sponsored cybercriminals.
A $13 billion DeFi wipeout occurred over two days, beginning with the KelpDAO attack. Multiple lending and yield protocols experienced significant declines in total value locked (TVL), with some dropping by double digits. Despite the TVL losses, token prices remained relatively stable, highlighting the severity of the security breach and its impact on the DeFi ecosystem.
Gunvor has warned of potential turbulence in oil prices due to ongoing Iran conflict and the closure of the Strait of Hormuz, which could disrupt supply chains and impact global markets. The geopolitical tensions, ongoing since April 2026, highlight risks to energy security and economic stability amid rising geopolitical risks in the region.
AAVE's total value locked (TVL) decreased by $8.4 billion following the KelpDAO exploit, contributing to a broader $13.2 billion decline in DeFi TVL. The incident, which exposed systemic vulnerabilities, raises concerns over security and could impact investor confidence and future growth in the decentralized finance sector. The event occurred in April 2026.
European gas prices surged 11% amid escalating US-Iran tensions, highlighting vulnerabilities in global energy markets. The increase, reported on April 20, 2026, underscores how geopolitical conflicts can impact supply chains and energy costs, potentially affecting broader economic stability. This development comes amid ongoing geopolitical tensions involving the US and Iran, with ripple effects felt across global markets.
Aave froze WETH withdrawals on certain markets following a $292 million exploit of KelpDAO on April 20, 2026. The attack caused significant bad debt, prompting whale exits and raising security concerns across DeFi platforms. The incident highlights ongoing vulnerabilities in decentralized finance protocols and the importance of robust security measures.
