Sophia Bennett
Crypto Analyst
A sharp spike in borrowing activity on Aave is drawing attention across the crypto market, with roughly $300 million borrowed in a short span following the recent KelpDAO exploit.
The surge came as traders and institutions rushed to secure liquidity, signaling stress in the system after the $290 million rsETH exploit linked to KelpDAO.
Rather than a sign of growth, this spike is being interpreted as a defensive move, where market participants are scrambling to manage risk exposure.
Exploit Fallout Spreads Into Lending Markets
The root of the issue lies in how the attacker used the stolen funds.
After exploiting KelpDAO’s cross‑chain bridge, the attacker deposited stolen rsETH tokens into Aave as collateral, then borrowed large amounts of ETH and other assets against it.
This created a complex situation:
the collateral (rsETH) had questionable backing after the exploit
borrowed funds were real and liquid
and Aave was left exposed to potential bad debt
In effect, the exploit didn’t just drain one protocol, it rippled into the broader DeFi lending ecosystem.
Liquidity Crunch Begins to Take Shape
The borrowing spike has had immediate consequences for Aave’s liquidity.
At one point, ETH utilization on the platform surged close to 100%, meaning nearly all available liquidity had been borrowed.
This creates a classic liquidity crunch:
fewer funds available for withdrawals
higher borrowing costs
and increased pressure on the system
Users began reacting quickly. Billions of dollars worth of assets were withdrawn from Aave as a precaution, reflecting growing concerns about solvency and risk exposure.
Contagion Fears Spread Across DeFi
The situation has also reignited fears of DeFi contagion, where issues in one protocol spread to others through interconnected systems.
Aave is one of the largest lending platforms in crypto, and its exposure to rsETH meant the impact was amplified.
Other protocols quickly moved to limit risk:
rsETH markets were frozen
lending activity was restricted
and several platforms paused related products
These emergency measures highlight how deeply interconnected DeFi protocols have become, and how quickly problems can cascade.
Structural Risks Come Into Focus
Beyond the immediate market reaction, the incident is raising deeper concerns about how DeFi is structured.
The chain of events shows how layered systems, involving restaking, cross‑chain bridges, and lending protocols, can introduce hidden risks.
Each layer adds complexity:
bridges depend on external verification systems
restaking tokens rely on underlying collateral
lending protocols assume collateral stability
When one layer fails, the entire system can come under pressure.
The Bottom Line
The $300 million borrowing spike on Aave is not just a market anomaly, it’s a signal of stress in the DeFi ecosystem following the KelpDAO exploit.
While Aave itself was not directly hacked, its role as a major liquidity hub meant it absorbed much of the shock.
For now, the situation remains fluid. But the incident underscores a key reality: in DeFi, liquidity can disappear just as quickly as it appears, especially when trust in collateral is shaken.