The exploitation of the Kelp liquid restaking protocol, resulting in a $293 million loss, illustrates systemic risks in decentralized finance. Industry executives state the event triggered cross-protocol contagion, affecting major platforms like Aave and Compound Finance. Experts warn that non-isolated lending models and cross-chain bridging can act as critical vulnerabilities.
A cyber attack on the Kelp liquid restaking protocol led to a loss of approximately $293 million. The platform was forced to pause its smart contracts on Saturday, according to an announcement.
The incident demonstrates how non-isolated lending can cause broader ecosystem contagion. Curve Finance founder Michael Egorov explained such lending exposes users to risks from all tokens used as collateral.
He further warned against the underlying cause, which was cross-chain bridging architecture. “Cross-chain is hard and potentially risky. Only use cross-chain infrastructure when absolutely necessary, and do it really carefully,” Egorov said in an email.
At least nine DeFi protocols, including Aave, Fluid, and Euler, were affected. These platforms took action to freeze markets or mitigate fallout following the exploit.
Blockchain security firm Cyvers described this as a contagion event. “This was not just a protocol exploit. It immediately became a cross-protocol contagion event,” the firm stated.
Cyvers CEO Deddy Lavid noted the challenge extends beyond contract-level security. He emphasized understanding how fast exploits can cascade across integrated protocols.
The Kelp exploit follows the $280 million Drift Protocol hack from last week. The sector saw at least 12 other platform hacks earlier in the same month.
Egorov said this incident is a learning experience for DeFi. This comes as losses from crypto hacks, code exploits, and scams reached $482 million in the first quarter of 2026.
