L0, Kelp, and Aave Exploit: What Happened and What DeFi Users Should Do Now

Home » L0, Kelp, and Aave Exploit: What Happened and What DeFi Users Should Do Now

The decentralized finance (DeFi) ecosystem has faced another major stress event following an exploit involving LayerZero-related infrastructure, Kelp DAO’s rsETH, and Aave. The incident created a chain reaction across liquidity pools, lending markets, and user positions, leaving many users unable to withdraw ETH or other assets in their preferred way.

This article explains what happened, why it matters, what options users have right now, and how the situation may eventually be resolved.

What Happened

According to the information currently circulating in the community, infrastructure connected to LayerZero (L0) was compromised, which allowed the attacker to mint rsETH through a bridge mechanism. Because decentralized exchange liquidity was too thin to exit efficiently through regular swaps, the attacker moved to Aave and used the newly minted rsETH as collateral.

Using that collateral, the attacker borrowed ETH, creating an estimated $180 million in bad debt. That instantly turned what could have been an isolated exploit into a broader ecosystem problem affecting lending, liquidity, and user confidence.

Why the Situation Became So Serious

The main problem was not only the minting of unbacked rsETH, but also the way that fake collateral was turned into real borrowed value. In practice, this meant the attacker deposited assets that should not have had real value, but was still able to extract actual ETH liquidity from Aave.

As panic spread, users rushed to withdraw funds, liquidity became strained, and Aave froze the relevant rsETH and WETH pools. This pushed the pressure into other areas of DeFi as users searched for alternative ways to unwind positions or access liquidity.

Because direct ETH exits became difficult, many users started exiting through stablecoins or borrowing stablecoins to repay positions. As a result, utilization rates for many stablecoin markets rose to 100% not only on Aave, but also on other lending platforms. That created another layer of danger: high borrow APY, rising pressure on open positions, and a growing risk of liquidation.

How Users Are Exiting Positions

For users who still want to leave affected positions, the most practical route has been on-chain liquidity. Instead of waiting for normal ETH withdrawal paths to fully recover, some users are exiting through whatever liquidity remains available on aggregators.

One of the main options mentioned by market participants is DefiLlama, which can help build a better route into the asset a user actually wants to hold. Another acceptable option is 1inch, which also tends to offer competitive execution depending on the pair and market conditions.

In many cases, the idea is not to exit perfectly, but to exit efficiently enough while accepting a relatively small loss instead of staying exposed to a position that may continue to deteriorate.

Alternative Liquidity Paths

To support Aave and reduce stress across the ecosystem, other DeFi protocols including Fluid introduced options that allow users to move into assets such as wstETH or weETH. From there, users may have a more flexible path to eventually withdraw funds or reposition into something safer.

This kind of support matters because it gives the market breathing room. Instead of every user trying to leave through the same narrow ETH route, some can rotate into alternative wrapped staking assets and reduce direct pressure on the most affected pools.

For users who specifically need WETH liquidity, the community has also shared additional routes and temporary solutions. These options may help in urgent cases, especially when the goal is to manage collateral, repay debt, or avoid liquidation.

What Happens Next

At the moment, the ecosystem still appears to be waiting for a coordinated resolution. Protocols have not yet reached one final common decision on how to handle the fallout. Meanwhile, time itself is a risk factor, because borrow APY continues to eat into positions and brings leveraged users closer to liquidation.

Even so, the base assumption among many observers is that Aave will ultimately be able to close the hole. The question is not whether it can be done, but how the burden will be split.

The likely paths include full coverage through Aave’s protection mechanisms, partial use of those mechanisms combined with treasury support, or another mixed structure depending on what governance and core stakeholders decide is the most sustainable approach.

Can Aave Survive This?

In practical terms, Aave is still viewed as one of the central pillars of DeFi. That is why many market participants believe it will not be allowed to fail. The protocol has too much strategic importance, too many integrations, and too many stakeholders for a full collapse to be treated as an acceptable outcome.

That does not mean everyone will be made fully whole, but it does suggest that some form of recapitalization or structured loss absorption is very likely.

What About rsETH Depositors?

For rsETH depositors, the picture is more painful. The current view is that losses could be roughly in the 20% range, because around 80% of the value may still remain backed. This means rsETH holders may not face a total wipeout, but a significant haircut remains possible.

From here, several futures are possible. The asset could continue living with a depeg, or the protocol could attempt a deeper restructuring and rebuild. There is still no final clarity on which route will be chosen.

Who Is Responsible?

Responsibility does not appear to end with one protocol. Aave is dealing with the lending-side consequences, rsETH holders are dealing with asset-side damage, and LayerZero-related infrastructure is also expected to bear some responsibility for what happened.

That said, there is currently no single agreed public roadmap that fully explains how the losses will be assigned, how compensation will work, or how long recovery may take. For now, much of the ecosystem remains in a holding pattern.

What Users Can Do Right Now

One possible option is to do nothing. For many users, especially those without immediate liquidation risk, waiting may be a rational strategy. The assumption behind this view is simple: the problem is serious, but it is likely to be resolved over time, and the core protocols involved will continue operating.

Another option is to reduce risk immediately. That can mean unwinding positions through aggregators, accepting a modest loss, or rotating into more liquid assets. For leveraged users, this may be the more prudent route, especially if high borrow APY is actively damaging the position every hour.

A third option is to unwind partially. Instead of closing everything, users can reduce leverage, repay part of their debt, and move toward a position that is easier to manage while the market waits for a fuller solution.

Broader Consequences for DeFi

This incident is another reputational blow for DeFi at a time when the sector has already had a difficult month. It highlights several recurring weaknesses: infrastructure risk, collateral risk, liquidity fragmentation, and the reality that bad debt in one place can quickly spill over into the wider ecosystem.

It also shows how quickly user behavior changes under stress. When one exit path closes, liquidity immediately shifts elsewhere. Stablecoin utilization spikes, borrow costs explode, and the pressure moves from one protocol to the next.

That is why events like this are not only technical incidents. They are also confidence events. They test how strong DeFi really is when systems fail in sequence rather than in isolation.

Final Thoughts

My personal view is that the situation will eventually be resolved and that Aave, in particular, will survive. However, that does not mean users should treat the situation casually. In stressed markets, preserving capital matters more than chasing an ideal outcome.

The most reasonable approach right now is to lower risk, unwind overly aggressive positions, and choose the route that fits your comfort level. For some, that means waiting. For others, that means exiting with a small loss before conditions worsen.

Either way, the key point is the same: avoid panic, understand your exposure, and make a deliberate decision instead of letting market pressure make it for you.

For more background, see this analysis on DeFi Prime and the related discussion referenced in the original source materials.

Leave a Reply

Your email address will not be published. Required fields are marked *

© Copyright 2026 DeFi Master
Powered by WordPress | Mercury Theme