{"id":590730,"date":"2026-04-27T19:35:16","date_gmt":"2026-04-27T19:35:16","guid":{"rendered":"https:\/\/Blockchain.News\/news\/aave-liquidity-freeze-rseth-exploit"},"modified":"2026-04-27T19:35:16","modified_gmt":"2026-04-27T19:35:16","slug":"aave-aave-suffers-historic-liquidity-freeze-after-rseth-exploit","status":"publish","type":"post","link":"https:\/\/e-bitco.in\/index.php\/2026\/04\/27\/aave-aave-suffers-historic-liquidity-freeze-after-rseth-exploit\/","title":{"rendered":"Aave (AAVE) Suffers Historic Liquidity Freeze After rsETH Exploit"},"content":{"rendered":"<figure class=\"figure mt-2\">\n<p> <a href=\"https:\/\/blockchain.news\/Profile\/Rebeca-Moen\">Rebeca Moen<\/a> <span class=\"publication-date ml-2\"> Apr 27, 2026 19:35<\/span> <\/p>\n<p class=\"lead\">A forged LayerZero message drained $292M, triggering a liquidity collapse on Aave. WETH liquidity dropped from $689M to $1.5M in hours.<\/p>\n<p> <a href=\"https:\/\/image.blockchain.news:443\/features\/99337E4F2AF5A9E157072A81ECFA5932C74C6A283D1F7E61DD518D1B57E65892.jpg\" class=\"hero-image-link\"> <img fetchpriority=\"high\" decoding=\"async\" class=\"rounded hero-image\" src=\"https:\/\/image.blockchain.news:443\/features\/99337E4F2AF5A9E157072A81ECFA5932C74C6A283D1F7E61DD518D1B57E65892.jpg\" alt=\"Aave (AAVE) Suffers Historic Liquidity Freeze After rsETH Exploit\" loading=\"eager\" width=\"1200\" height=\"630\"> <\/a> <\/figure>\n<p>A forged LayerZero message targeting Kelp DAO on April 18, 2026, drained 116,500 rsETH ($292 million) and triggered the largest <a rel=\"nofollow\" href=\"https:\/\/blockchain.news\/wiki\/what-is-balancer\">liquidity<\/a> freeze in Aave&#8217;s history. Within two hours, WETH liquidity on Aave V3 collapsed from $689 million to just $1.5 million. The protocol\u2019s total available liquidity contracted by 41%, falling from $9.77 billion to $5.75 billion in 29 hours.<\/p>\n<p>The attacker exploited a vulnerability in Kelp DAO\u2019s rsETH Omnichain Fungible Token (OFT) adapter, using compromised LayerZero verifier nodes to forge a cross-chain message. The stolen rsETH was looped as collateral across Aave, Compound, and Euler, netting $236 million in WETH and wstETH before Kelp DAO paused operations. Aave\u2019s automated systems functioned as designed, but the attack\u2019s scale overwhelmed reserves, driving utilization to 100% and freezing liquidity.<\/p>\n<h2>Liquidity Collapse Stages<\/h2>\n<p>The liquidity squeeze unfolded in five stages:<\/p>\n<ul>\n<li><strong>Pre-event baseline (17:00 UTC):<\/strong> Aave\u2019s total available liquidity stood at $9.77 billion.<\/li>\n<li><strong>Exploit window (18:00-19:00 UTC):<\/strong> Liquidity dropped $1.56 billion (-16%). WETH reserves plummeted by 99.8%.<\/li>\n<li><strong>rsETH freeze to WETH freeze (19:00-03:00 UTC):<\/strong> Panic borrowing further drained $1.1 billion as USDT and USDC liquidity hit zero.<\/li>\n<li><strong>Post-WETH freeze stabilization:<\/strong> The pace of withdrawals slowed, with reserves contracting by $538 million.<\/li>\n<li><strong>Continued stabilization:<\/strong> Liquidity fell by $673 million, driven by wstETH and WBTC withdrawals.<\/li>\n<\/ul>\n<p>The Protocol Guardian froze WETH borrowing at 02:28 UTC on April 19, nearly seven hours after reserves were exhausted. This action prevented further strain but also limited replenishment via new deposits.<\/p>\n<h2>Structural Risks Revealed<\/h2>\n<p>The incident exposed risks inherent in layered token systems like rsETH, which rely on multiple smart contracts, governance mechanisms, and cross-chain verifiers. A failure at the deepest layer\u2014LayerZero\u2019s verifier network\u2014cascaded upward, leaving rsETH holders and Aave depositors exposed. Post-exploit analysis from LlamaRisk estimates bad debt between $123.7 million and $230.1 million, with ~$71 million frozen by the Arbitrum Security Council offering partial recovery potential.<\/p>\n<h2>Market Response<\/h2>\n<p>The broader DeFi ecosystem saw $13.2 billion wiped from total value locked (TVL) over 48 hours, driven by forced liquidations and asset withdrawals. AAVE, Aave\u2019s governance token, dropped 21% from $115 to $90 during the event. Notably, institutional appetite for ETH exposure remained intact, with U.S. spot ETFs recording $111.2 million in post-event inflows through April 21, led by BlackRock\u2019s ETH funds.<\/p>\n<h2>Key Takeaways<\/h2>\n<p>Three critical lessons emerge:<\/p>\n<ol>\n<li>Cross-chain verifier configurations need the same rigor as oracles to prevent similar exploits.<\/li>\n<li>Shared-liquidity models like Aave\u2019s face amplified risks during high-utilization events. Isolated-market designs, such as Morpho Blue, demonstrated greater resilience, limiting losses to $1 million.<\/li>\n<li>The wrapped token stack, particularly liquid staking derivatives, amplifies risk when cross-chain elements are involved. However, the broader LRT category held up, with no major repricing of stETH or related assets.<\/li>\n<\/ol>\n<p>Aave\u2019s governance now faces a pivotal decision: how to allocate losses across stakeholders. Recovery of the frozen $71 million from the exploiter\u2019s wallet could narrow the damage and restore confidence in the protocol\u2019s long-term viability.<\/p>\n<p><span><i>Image source: Shutterstock<\/i><\/span> <!-- Divider --> <!-- Author info END --> <!-- Divider --> <a href=\"https:\/\/blockchain.news\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Rebeca Moen Apr 27, 2026 19:35 A forged LayerZero message drained $292M, triggering a liquidity collapse on Aave. WETH liquidity dropped from $689M to $1.5M in hours. A forged LayerZero message targeting Kelp DAO on April 18, 2026, drained 116,500 rsETH ($292 million) and triggered the largest liquidity freeze in Aave&#8217;s history. Within two hours, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":590731,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[168,23,6186,508,25,24802],"class_list":{"0":"post-590730","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-blockchain","8":"tag-aave","9":"tag-defi","10":"tag-layerzero","11":"tag-liquidity","12":"tag-news","13":"tag-rseth"},"_links":{"self":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts\/590730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/comments?post=590730"}],"version-history":[{"count":0,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts\/590730\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/media\/590731"}],"wp:attachment":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/media?parent=590730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/categories?post=590730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/tags?post=590730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}