The Aave $300M Exploitation

Created by Michael Rifa’ie

Disclaimer

This paper is intended solely for informational purposes. It does not constitute investment advice, nor is it an endorsement of any investment actions. The author bears no responsibility for any decisions or actions taken by readers based on this material. Should you identify any inaccuracies, please feel free to reach out on Instagram @michael_rifaie. Thank you, and enjoy the paper!

Introduction

Source: TradingView

About one month ago, specifically on April 18, 2026, $AAVE dropped 23%, plummeting from $116.08 to $88.70 in just two days. While screening altcoins, I wondered why $AAVE was the only one dumping so aggressively. At the time, other altcoins were experiencing standard drops of around 8–10%, yet $AAVE alone plummeted by 23%.

Source: DefiLlama

Upon reviewing Aave’s statistics, I discovered that their Total Value Locked (TVL) had also fallen significantly — from $26B on April 18, 2026, to $17B on April 20, 2026. This indicated that $9B had left the Aave protocol. When I looked into crypto market news, the headlines were flooded with the incident: a $300M exploitation, which we will break down below.

Definitions

• Liquid Staking Token (LST): A token that represents an asset staked on a blockchain or protocol, designed to solve liquidity issues.
• Liquid Restaking Token (LRT): A token that represents a staked LST, further optimizing capital efficiency and liquidity.
• Decentralized Verifier Network (DVN): A group of nodes that verifies data sent across different blockchains (cross-chain). Applications integrating LayerZero into their infrastructure must select a DVN from providers like Google, Polyhedra, or LayerZero Labs. A DVN consists of Validator Nodes and RPC Nodes.
• Validator Nodes: The “brains” of the network that verify whether a cross-chain message (e.g., “Address X sent 10 USDC to Address Y”) is valid. If it is valid, the Validator Nodes sign it to grant approval.
• Remote Procedure Call (RPC) Nodes: The “eyes” of the network that enable Validator Nodes to interact with and read the blockchain. Validator Nodes rely entirely on the data provided by RPC Nodes to verify and sign messages.
• Decentralized Exchange (DEX): A cryptocurrency exchange that operates trustlessly without a central authority or intermediary.
• Loan-to-Value (LTV): A ratio comparing the value of a loan against the value of the posted collateral, calculated by dividing the loan value by the collateral value.
• Total Value Locked (TVL): The total amount of assets staked or deposited inside a blockchain or protocol. A higher TVL indicates strong user trust in the platform’s security and utility.
• Quorum: The minimum number of independent DVNs required to verify a message before it can be validated. For example, a 2-of-3 Quorum means at least two out of three independent DVNs must approve the transaction.

KelpDAO’s 1-of-1 Model

Source: Dune

KelpDAO is a Liquid Restaking Protocol built on Ethereum that allows users to stake Native Ethereum or Ethereum Liquid Staking Tokens (LSTs) to earn a Liquid Restaking Token (LRT) called rsETH. By integrating LayerZero Protocol into their infrastructure, KelpDAO expanded its LRT ecosystem across multiple blockchains.

LayerZero’s cross-chain bridge operates by locking up (or burning) a token on a source blockchain and sending a message to a destination blockchain to mint or release an equivalent amount. For instance, if 100 ETH is locked on Unichain, the protocol transmits a message to Ethereum to release 100 ETH.

KelpDAO utilized LayerZero’s default 1-of-1 verification model. Under this model, only a single DVN is required to approve cross-chain messages or fund transfers. While LayerZero offers various DVN options — including Google, Polyhedra, and Animoca — KelpDAO opted for LayerZero Labs’ proprietary DVN as its sole verifier.

To understand the exploit, it is vital to note the relationship between validator nodes and RPC nodes. While validator nodes approve transactions, they cannot “see” the blockchain directly; they rely entirely on RPC nodes for external data.

When the attacker initiated the exploit, they bypassed the validator nodes (which are highly resilient and nearly impossible to breach) and instead targeted the more vulnerable RPC nodes. The hacker compromised two LayerZero Labs RPC nodes and launched a DDoS attack against the remaining healthy ones. As a result, the validator nodes flagged the offline nodes as untrusted and pulled data exclusively from the two compromised RPC nodes, accepting the manipulated information as truth.

The Unbacked Bridge

Source: Magic Eden

By leveraging the compromised RPC nodes, the hacker fabricated data claiming they had burned 116,500 rsETH (~$292M) on Unichain. Relying on this false information, the validator nodes approved the cross-chain message, prompting KelpDAO to mint and release 116,500 rsETH directly to the hacker’s Ethereum address.

Because these tokens were generated out of thin air without any actual asset collateral on the source chain, this exploit is referred to as an “unbacked bridge.”

The Bad Debt

Source: Binance

After acquiring the 116,500 rsETH (~$292M), the hacker avoided selling the tokens directly on a Decentralized Exchange (DEX) for two major reasons:

• The stolen assets represented roughly 18% of the total circulating supply of rsETH. Dumping such massive volume into standard DEX liquidity pools would have caused severe price slippage, drastically reducing the final cash value received.
• Massive, unusual on-chain swaps are heavily monitored by blockchain security firms, posing a high risk of immediate address freezing.

Instead, the attacker executed a multi-step liquidation strategy:

• Aave V3 Exploitation: They deposited 89,567 rsETH (~$221M) into Aave V3. Because rsETH carried a highly generous 93% LTV on Aave, the hacker successfully borrowed $190M worth of WETH and wstETH against their unbacked collateral. This left Aave holding roughly $196M in bad debt.
• Privacy Routing: The borrowed assets were swapped for 75,700 ETH on Ethereum and 30,765 ETH on Arbitrum. To sever the on-chain paper trail, the hacker routed these funds through privacy protocols and cross-chain bridges like Umbra, THORChain, and Chainflip, ultimately converting a portion of the proceeds into Bitcoin.

Fate of the Stolen Funds

Source: Yahoo Finance

On April 21, 2026, the Arbitrum Security Council successfully intervened, freezing 30,765 ETH (~$71M) on the Arbitrum network and moving the assets into a governance-controlled intermediary wallet.

Source: AOL

Despite this intervention, the hacker retained control of over $221M in un-frozen stolen assets, successfully laundering between $190M and $196M via privacy protocols.

Strategic Recommendations

Source: BitPay

To mitigate cross-chain bridge vulnerabilities and prevent similar exploits in the future, protocols should implement the following security enhancements:

• Multi-DVN Mandate: Deprecate the insecure 1-of-1 verification model in favor of a 2-of-2 model as the baseline standard. This ensures that data validation is decentralized not just at the node level, but across separate security organizations, creating dual layers of consensus.
• Mandatory ZK-DVN Integration: Zero-Knowledge (ZK) DVNs utilize cryptographic mathematical proofs to verify messages, making them highly accurate and mathematically secure against data tampering. Protocols should mandate that their Quorums include at least one ZK-powered DVN, such as Polyhedra.
• Customized DVN Quorums: Protocols should actively customize their security configurations beyond standard baselines, scaling up to 2-of-3 or 3-of-5 DVN setups based on total value exposure to maximize institutional-grade security.

Research Reference

• Chainalysis
• QuillAudits
• KuCoin News
• Oak Research
• BingX News
• Aave Protocol Reports
• PeckShield
• Arbitrum News
• Phemex
• Binance Square