Aave Defends Protocol After $8.45 B DeFi Withdrawal Surge

A major exploit in April triggered a severe liquidity crisis across decentralized finance, with the Aave lending protocol processing approximately $8.45 billion in user withdrawals within 48 hours. The event has sparked a debate over systemic resilience and risk management in the sector.

The crisis originated from a $292 million exploit of the KelpDAO protocol, which utilized a LayerZero bridge infrastructure. Attackers employed RPC spoofing and DDoS techniques to manipulate verifier nodes, according to subsequent analyses. While the attack did not directly target Aave's smart contracts, its effects rapidly spread to the lending platform as users withdrew funds amid heightened risk perceptions.

Despite the extreme outflow, Aave's core operations continued without halting withdrawals or freezing user access. However, the protocol required significant emergency support to stabilize its liquidity position. The Aave decentralized autonomous organization (DAO) pledged 25,000 ETH, and Aave Labs founder Stani Kulechov personally contributed an additional 5,000 ETH, valued at approximately $8.4 million at the time. The total emergency intervention has been reported as roughly $300 million.