Crypto
💥The $293M Kelp DAO Hack Just Stressed-Tested All of DeFi
The Rundown: A single-validator bridge exploit on Kelp DAO triggered $293M in losses and roughly $20B in DeFi TVL withdrawals, prompting JPMorgan and Jefferies to warn institutions away from open DeFi — while a community recovery fund scrambles to fill the 163,200 ETH hole.
The details:
- ●The Kelp DAO exploit on April 18 targeted a single-validator bridge with no collateral concentration limits, draining $293M and triggering a cascade of ~$20B in total DeFi TVL losses
- ●The DeFi United recovery fund has filled 73,700 ETH of the 163,200 ETH gap, with a new TokenLogic proposal to contribute 25,000 ETH from Aave's treasury
- ●JPMorgan and Jefferies issued warnings to institutional clients about open DeFi's incompatibility with traditional risk frameworks following the hack
- ●On the institutional adoption front, Mizuho, Nomura, and JSCC launched a JGB tokenization proof-of-concept on Canton Network for 24/7 real-time collateral management, while DoorDash went live on Tempo for stablecoin payouts across 40+ countries
Why it matters: This hack is a stress test that exposed the gap between DeFi's ambitions and its operational maturity. Single points of failure in bridge validators, no incident-response playbooks, and no pre-funded loss-absorption waterfalls are the exact things that keep institutional capital on the sidelines. The JPMorgan and Jefferies warnings will have real chilling effects on enterprise DeFi adoption timelines. For builders, the path forward is clear: adopt TradFi-style controls — multi-verifier requirements, published response frameworks, waterfalls — or watch permissioned networks like Canton capture the institutional market while open DeFi fights over retail. The DoorDash and Japan tokenization news shows the stablecoin and tokenization narrative is very much alive, just on more controlled rails.
📰 Source: Converge by The Defiant, The Defiant