Exposure vs. Modeled Scenarios
Initial drain, LlamaRisk bad-debt scenarios, frozen funds
Tracking DeFi United relief · Apr 2026
The KelpDAO rsETH Exploit — tracked in real time.
Follow the aftermath of the April 18 bridge drain: Aave bad debt, Fluid redemptions, and the DeFi United coalition's coordinated recovery effort.
Total Loss
~$292M
116,500 rsETH (~18% of supply)
Aave Bad Debt
$123.7M – $230.1M
Scenario range
Fluid Redeemed (48h)
$136M
aWETH exit protocol
DeFi United Pledged
43.5k ETH
5 contributors disclosed
DeFi United Contributions
Confirmed Proposed
What happened?
On April 18, 2026, an attacker — Chainalysis attributes it to DPRK-linked Lazarus Group — exploited a 1-of-1 LayerZero DVN on the KelpDAO bridge and minted 116,500 unbacked rsETH (~$292M, ~18% of circulating supply). KelpDAO's pauser multisig froze contracts 46 minutes later; Aave, SparkLend and Fluid froze rsETH markets. A Fluid-led consortium launched an aWETH redemption protocol that processed $136M in the first 48 hours. Aave service providers announced DeFi United, a coordinated relief effort with ecosystem partners now working through governance.