KelpDAO Exploited for $292M as DeFi Security Crisis Deepens

The DeFi ecosystem is facing a severe security crisis following the confirmed exploit of KelpDAO on April 19, 2026, with total losses reaching $292 million. The contagion spread significantly to Aave V3, where the WETH reserve incurred bad debt after attackers utilized exploited rsETH tokens as collateral. In a coordinated response to contain the damage, industry giants BitGo, Polygon, and Katana implemented strict rate limits to isolate the exploit's impact from the broader market. This breach, now labeled the largest hack of the year, has triggered a massive capital flight and a critical reevaluation of systemic risks within the Ethereum and Solana ecosystems. Alongside recent exploits of Resolv and Rhea Finance, the incident underscores profound vulnerabilities in core Web3 infrastructure. Market participants remain on high alert as technical teams work to mitigate further contagion across multiple blockchain networks.