Aave faces $8.45 billion DeFi bank run after rsETH bridge hack

Aave’s core contracts stayed intact, but the platform saw $8.45 billion of user withdrawals in April 2026 after the KelpDAO rsETH bridge exploit sparked a rapid liquidity crunch and forced emergency risk adjustments【1】.

The catalyst and on‑chain fallout

The stress originated not from a direct hack on Aave but from a LayerZero bridge attack on KelpDAO’s rsETH bridge, where attackers stole roughly $292 million of rsETH tokens【1】. Because rsETH was widely used as collateral on Aave, concerns over its backing prompted lenders to pull funds, creating a cascade of withdrawals. As users rushed to exit, several Aave markets reached full utilization, meaning the available liquidity was fully borrowed and could not accommodate further exits without delay【1】. To contain the damage, Aave’s risk managers activated built‑in emergency controls, including freezes and adjustments to loan‑to‑value limits【1】.

Protocol resilience versus lingering risk

Aave’s founder, Stani Kulechov, framed the episode as proof of the platform’s “resilience,” emphasizing that the core smart‑contract logic never froze and that on‑chain transparency helped the system stay operational【2】. Independent analysts, however, pointed to gaps in Aave’s own risk architecture, noting that the reliance on external assets like rsETH exposed the protocol to “third‑party” vulnerabilities and that concentration risk remains high when large borrowers can move en masse【2】. While the emergency controls prevented a full breakdown, the event highlighted that DeFi’s composability—its ability to interlink assets across protocols—can also accelerate systemic stress.

Market reaction and price context

The bank‑run‑like episode coincided with a broader dip in crypto markets, but Aave’s AAVE token held relatively steady, trading near its recent range of $70‑$80 and showing a modest 1‑2 % decline over the 24‑hour period following the withdrawals【2】. The token’s market cap, still above $10 bn, reflects its status as one of the largest DeFi lending assets, yet the episode underscores that price stability does not eliminate underlying liquidity risks.

What to watch

• Liquidity utilization: Monitor Aave pool utilization levels; a repeat of 100 % usage could signal renewed stress.
• rsETH bridge activity: Any further exploits or remediation steps on the KelpDAO bridge will directly affect Aave collateral health.
• Governance proposals: Upcoming votes on risk parameters or isolation mode extensions could reshape the protocol’s defensive posture.

Aave’s ability to process $8.45 bn of withdrawals without a contract breach shows that DeFi protocols can survive rapid outflows, but the episode leaves open whether transparency and on‑chain controls alone are sufficient to guard against future “bank runs” triggered by external asset failures.