Aave Multisig Guardian Freezes WETH in the Lending Market

April 19th — Per LookOnChain data: A trader purchased 2.79 billion ASTEROID tokens for $575 on April 17th. The tokens now exceed $1 million in value, delivering a return of over 1,700x.

April 19th — Defillama data shows the KelpDAO hacker borrowed a substantial amount of ETH from Aave. Following this exploit, a large whale withdrew funds from Aave over security concerns. As a result, Aave’s Total Value Locked (TVL) fell to $219.66 billion, marking a 16.78% drop from yesterday’s $263.96 billion.

April 19: Crypto influencer benmo.eth issued a statement noting the KelpDAO rsETH hack has far-reaching repercussions, with blame falling on both KelpDAO and LayerZero. He outlined the following potential impacts of the incident: - Wrapped assets like LRT (Liquid Restaking Tokens) can’t match the security of native assets. Lending protocols shouldn’t treat them as equivalent collateral. - LayerZero may lose cross-chain market share going forward. Several assets—including usde and usd0—have stopped using its cross-chain solution. Even if business resumes, rebuilding its reputation will be extremely difficult. - Aave’s “security halo” has shattered, and unified lending market risks are again under whales’ scrutiny. Each new collateral asset adds extra risk to existing ones, which is unfair to native assets. Aave V4 and modular lending could emerge as future trends, speeding up the transition. The market will shift focus to the “lending business itself” rather than a single platfor

**April 19th Update:** Per Onchain Lens monitoring, KelpDAO sustained ~$294M in losses from a LayerZero bridge exploit. ZRO token plummeted from $2 to $1.4. A whale with a long ZRO position on HyperLiquid was partially liquidated, losing $2.88M. The whale still holds the position, now facing unrealized losses of over $750k, with total losses around $28.98M.

April 19th: LayerZero said in a post, “We have fully understood the rsETH exploit incident and have been actively collaborating with the KelpDAO team on fixes since the incident took place, while continuing to monitor the situation. All other applications remain secure. We’re currently working with teams like SEAL to confirm the root cause. Once we have all the details, we’ll publish a full post-mortem report alongside KelpDAO.”

On April 19, following an alert about a potential vulnerability in rsETH, the Aave Guardian proactively froze rsETH and wrsETH markets across all deployments. All Aave pools remain secure and operational. This incident stems from the rsETH asset itself—not a vulnerability in the Aave protocol. KelpDAO, LayerZero, and other teams are currently investigating the root cause, with Aave collaborating closely. **Aave V3**: The Guardian has frozen rsETH and wrsETH markets across all deployments. This freeze prevents new deposits and borrowing using rsETH as collateral; existing positions are unaffected. **Aave V4**: The Aave Protocol Safety Committee has implemented equivalent protective measures for Aave V4, disabling new supply and borrowing of rsETH. Relevant configuration updates were deployed via the Aave Core Hub and Kelp E Spoke.