$292 million Kelp DAO exploit exposes DeFi vulnerabilities

A $292 million exploit on Kelp DAO has shaken decentralized finance (DeFi) lending markets, prompting industry insiders to call for stronger security measures. Despite the setback, experts view it as a temporary hurdle rather than a barrier to institutional adoption. Wall Street firms continue advancing into onchain finance amid the fallout.

The Kelp DAO exploit, the largest crypto hack of the year, rattled DeFi lending markets at a critical juncture. Wall Street players like Apollo Global Management, which manages $900 billion, recently partnered with Morpho to bolster lending with potential governance token acquisition. Around the same time, BlackRock launched its tokenized money market fund on Uniswap, signaling sustained institutional interest in onchain markets despite the breach's exposure of fragile system elements. Industry insiders argue the incident will not derail this momentum but underscores urgent fixes needed for scaling larger capital pools into DeFi. Nick Cherney, head of innovation at Janus Henderson, which oversees $500 billion, described it as 'a speed bump for sure, but not a roadblock.' He noted that such failures force improvements, with tokenized real-world assets like funds and bonds bringing refined traditional finance safeguards to anchor DeFi. Security experts emphasized elevating protections. Paul Vijender, head of security at Gauntlet, said DeFi operates in a 'highly adversarial environment' where systems match their weakest links, advocating zero-trust architectures with continuous monitoring and redundancies. Evgeny Gokhberg of Re7 Capital urged making timelocks, multi-signature controls, and tighter collateral standards baseline requirements, not optional best practices. Bhaji Illuminati, CEO of Centrifuge Labs, highlighted DeFi's accelerated evolution toward institutional-grade standards, stressing verifiable collateral, predictable smart contracts, and reliable liquidity. 'Every layer of the DeFi stack needs to make security their number one priority,' she said, especially amid rising AI threats.

Awọn iroyin ti o ni ibatan

Dramatic courtroom scene depicting lawyers arguing over frozen Ethereum coins from Kelp DAO hack amid terrorism claims.
Àwòrán tí AI ṣe

Aave fights to unfreeze $71 million amid Kelp DAO hack court battle

Ti AI ṣe iroyin Àwòrán tí AI ṣe

A federal case is unfolding over $71 million in frozen cryptocurrency following the Kelp DAO exploit, as Aave seeks to release the funds for DeFi recovery. Victims of decades-old North Korean terrorist acts have filed a restraining notice against Arbitrum DAO, claiming the 30,765 ETH as DPRK-linked property. The dispute pits recent hack victims against long-standing terrorism judgment holders.

LayerZero has acknowledged it made a mistake by allowing its own verifier network to secure high-value assets in a vulnerable setup. The admission comes weeks after a $292 million hack on Kelp DAO that the company had initially blamed on the developer. The firm says its core protocol remained unaffected.

Ti AI ṣe iroyin

Decentralized finance recorded far fewer losses in recent years, according to new industry data. Total incidents dropped from $2.62 billion in 2022 to $534 million in 2024. A single November 2025 exploit across six networks illustrated the remaining threat.

Zcash token ZEC dropped sharply after developers disclosed a vulnerability in the Orchard shielded pool that could have allowed undetected counterfeiting of tokens. The flaw, present since 2022, was found on May 29 using an AI model and patched by June 1. No evidence of exploitation was found, though privacy features prevent cryptographic proof.

Ti AI ṣe iroyin

A private key compromise led to a drain of more than $520,000 from a Polymarket-linked wallet on the Polygon blockchain on May 22. The prediction market platform confirmed that user funds and core contracts remained unaffected.

Jaredfromsubway.eth, a prominent Ethereum MEV bot, lost more than $7.5 million after approving attacker-controlled contracts that enabled an allowance drain. The incident occurred through a series of fake trading routes set up over several weeks. Security firm Blockaid identified the exploit as targeting the bot's automated approval logic rather than private keys or protocol flaws.

Ojú-ìwé yìí nlo kuki

A nlo kuki fun itupalẹ lati mu ilọsiwaju wa. Ka ìlànà àṣírí wa fun alaye siwaju sii.
Kọ