Crypto
💥Kelp DAO $293M Hack Wipes $20B in DeFi TVL and Spooks Institutions
The Rundown: A single-validator bridge exploit drained $293M from Kelp DAO on April 18, triggering ~$20B in DeFi TVL losses and prompting JPMorgan and Jefferies to warn institutions away from open DeFi.
The details:
- ●The Kelp DAO exploit on April 18 leveraged a single-validator bridge with no collateral concentration limits, resulting in $293M stolen and roughly $20B in broader DeFi TVL losses.
- ●JPMorgan and Jefferies issued warnings to institutional clients about DeFi's incompatibility with traditional risk frameworks in the hack's wake.
- ●The DeFi United recovery fund has filled 73,700 ETH of the 163,200 ETH gap, with a new TokenLogic proposal to contribute 25,000 ETH from Aave's treasury.
- ●Mizuho, Nomura, and JSCC launched a JGB tokenization proof-of-concept on Canton Network for 24/7 real-time collateral management — signaling institutions are moving toward permissioned alternatives.
Why it matters: This hack is a stress test for DeFi's institutional ambitions. The industry's response — a community-funded recovery drive and governance proposals — demonstrates resilience but also exposes the gap between DeFi's current risk architecture and what institutional capital actually requires (multi-verifier systems, published incident-response frameworks, pre-funded loss-absorption mechanisms). For founders building in Web3, the lesson is clear: if you want institutional money, you need TradFi-grade operational controls, not just TradFi-grade marketing.
📰 Source: Converge by The Defiant, The Defiant