It was stated that decentralized finance (DeFi) platform Aave withdrew a total of over $10 billion in assets from its users after the major security vulnerability in the Kelp DAO. Kelp DAO stands out as one of the recent major players in decentralized finance, known for its blockchain-based liquid staking and restaking services. The exploit caused the total value locked on Aave’s platform to decrease by approximately 40 percent.
Sharp drop in Aave after Kelp DAO attack
When the exploit in question broke the different cross-chain collateral model with a $292 million vulnerability, many users turned to safer and more clutter-free alternatives. According to DeFiLlama data, while the total amount of assets in Aave decreased rapidly after this event; It caused the affected collateral to be frozen in the market, liquidations to be halted and leverage to be reduced, thus paving the way for withdrawals from the platform.
Users moved some of their assets to the Spark protocol associated with Maker. Spark’s total locked value has increased by nearly 10 percent recently, particularly with its infrastructure backed by Sky with $6.5 billion in stablecoin reserves. This indicates that users are inclined towards protocols that offer a more controlled risk structure rather than complex collateralized open-ended debt markets.
The trend towards alternative protocols continues
On the other hand, there was no significant decline in large liquid staking providers such as Lido. This chart shows that investors are not completely abandoning their Ethereum exposure, but are trying to eliminate additional risks from re-staking, asset transfer, and cross-chain bridges.
Significant inflows were also observed in real asset protocols such as Centrifuge and Spiko. These platforms bridge the gap between crypto and real financial applications by providing access to tokenized traditional assets such as U.S. Treasury bills and bonds.
Users become risk averse and wait
Many investors preferred to transfer their assets to stablecoins, especially USDC. Thus, rather than making a new investment move, it is possible to wait in a more risk-free position until the temporary effect of uncertainty and loss of confidence in the market subsides.
Not all funds coming out of Aave went to other platforms. Some of them were directly withdrawn from the market by paying off debts and liquidating positions. This caused the total locked value to decrease mechanically without flow to a new protocol.
As a result, it is noteworthy that while the capital is distributed among different protocols in the market, the trust in common collateral layers is shaken and an environment is created where risk management and simple solutions come to the fore.
After the attack, “Users are directing their capital to controlled infrastructures and stablecoins in order to reduce the risk in complex layers. They began to question market confidence.” comment stands out.


