DeFi just got a $13B reality check in 48 hours.
And your stablecoins might be stuck.
What’s going on?
It started with
@DriftProtocol on April 1. North Korea's Lazarus Group stole $285M after a six month spy operation. No joke. Then 18 days later,
@KelpDAO's rsETH bridge got hit. Its rsETH bridge was drained for about $292M, including 116,500 rsETH. That's over half a billion dollars in hacks this month alone. April is not being kind!
Here’s where it gets messy. The KelpDAO attacker didn’t just walk away with the $293M. They parked 116,500 rsETH on
@Aave as collateral, then borrowed $196M in real ETH!
The catch? That rsETH wasn’t real. No backing. Just empty collateral.
Aave itself didn’t break. The system did exactly what it was supposed to do. The problem was letting worthless collateral in to begin with.
What followed was predictable. Pure Panic.
Whales started pulling out fast. TVL on
@Aave dropped from $26.4B to $18.6B in a weekend. Roughly $8B wiped out.
And then the real issue hit. ETH, USDT, and USDC pools maxed out at 100% utilization.
In simple terms, funds are effectively stuck.
$3B in USDT and $2B in USDC are completely trapped on Aave right now. The only way out for USDT depositors is to take a loan against their own deposits at a loss. People are paying to escape. Over $300M in desperate borrowing happened in just 24 hours.
And then there's
@RaveDAO. Their RAVE token pumped about 4,500% in a week, briefly hitting a market value of around $5Bn out of nowhere! Then crashed hard, about 90% - straight from $27 to $1. Pooff! Binance and Bitget launched investigations after suspicious wallets holding 96% of the supply started moving tokens. RaveDAO says they didn't do it. But the chain data says otherwise.
@Arbitrum's Security Council froze 30,766 ETH tied to the exploit. Too little, too late for the people whose money is still stuck.
So what is the real problem here?
Not “crypto is broken”. Or “DeFi is dead”.
It is this:
DeFi still runs on concentrated trust.
- Admin keys.
- Bridge verification.
- Collateral assumptions.
- Token supply sitting in too few hands.
That is the real chokepoint. We love saying “code is law,” but the truth is messier.
Once a protocol depends on a single verifier, a thin market, or one dominant wallet, it stops being the fully decentralized thing people think they are using.
It becomes a structure with hidden stress points.
And stress points always get tested.
Stay safe out there.