{"id":83417,"date":"2026-04-20T11:33:17","date_gmt":"2026-04-20T11:33:17","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=83417"},"modified":"2026-04-20T11:33:17","modified_gmt":"2026-04-20T11:33:17","slug":"defillama-co-founder-suggests-3-paths-to-resolve-293m-kelpdao-hack-fallout","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=83417","title":{"rendered":"DeFiLlama Co-Founder Suggests 3 Paths to Resolve $293M KelpDAO Hack Fallout"},"content":{"rendered":"
\n

The $293 million KelpDAO hack on April 18 has left Aave, rsETH holders, and the wider DeFi ecosystem staring at a hole nobody quite knows how to fill.<\/p>\n

But on Sunday, DeFiLlama co-founder 0xngmi laid out three realistic options on the table and ran the numbers on each.<\/p>\n

Three Scenarios, None of Them Clean<\/h2>\n

0xngmi\u2019s first option is to spread<\/a> the pain. According to them, if KelpDAO socializes losses across all users, it would work out to an 18.5% haircut. There are some 666,000 rsETH sitting across Aave deployments, and most mainnet positions are looped close to the maximum loan-to-value ratio (LTV), so 0xngmi\u2019s model assumes they are essentially at liquidation.<\/p>\n

Wiping out all equity in those positions leaves roughly $216 million in bad debt, and Aave\u2019s Umbrella ETH coverage would absorb $55 million of that, while the protocol\u2019s treasury could cover another $85 million, which would leave a gap of about $76 million. To close it, 0xngmi suggested that Aave could either take out a loan or liquidate its AAVE treasury tokens. That stash is currently worth around $51 million.<\/p>\n

Option two is much uglier, as it would mean \u201crugging\u201d rsETH holders on layer 2 chains. This would leave Aave with $359 million of rsETH supply, and assuming it was all looped at maximum LTV, it would create $341 million of bad debt across lending markets. But since Umbrella covers none of it, 0xngmi said Aave would have to pick which markets to salvage and which to abandon, with Arbitrum, Mantle, and Base most likely to suffer the biggest losses.<\/p>\n

The third option, while most technically appealing, could be the hardest to pull off. It involves going back to a pre-hack snapshot and trying to make only the direct victims whole. This would mean paying back the $124 million the hacker is said to have taken from Aave and another $18 million from Arbitrum. But the problem is that, since the hack, the money has moved around a lot across pooled protocols, making it difficult to cleanly separate one depositor\u2019s funds from another.<\/p>\n

OneKey founder Yishi also pushed<\/a> for a fourth path that sits outside 0xngmi\u2019s framework: negotiate with the hacker first, offering them a 10% to 15% bounty, and try to get most of the money back before any of the harder decisions need to be made. If that fails, Yishi argued that LayerZero\u2019s ecosystem fund should carry most of the bill, given its resources and long-term interest in preserving the OFT ecosystem.<\/p>\n

How $293M Left in Two Transactions<\/h2>\n

Cyvers founder Meir Dolev reconstructed<\/a> the on-chain timeline for the KelpDAO attack<\/a>, and it moves fast. The attacker\u2019s wallet was funded through Tornado Cash about 10 hours before anything happened. Then, at 17:35 UTC on April 18, two transactions occurred: commitVerification on LayerZero\u2019s ReceiveUIn302, followed 24 seconds later by IzReceive on EndpointV2. That second transaction drained 116,500 rsETH, valued at about $293.5 million, in one shot.<\/p>\n

KelpDAO\u2019s multisig responded at 18:23 UTC by blacklisting the attacker\u2019s recipient address on rsETH, and it worked. A second attempt, 3 minutes later, which would have taken another 40,000 rsETH worth around $100 million, hit the blacklist and reverted.<\/p>\n

According to Dolev, the root cause was quite simple: KelpDAO\u2019s Unichain-to-Ethereum bridge required<\/a> only one DVN attestation to release funds. Forging that one verification allowed the hacker to move $293 million.<\/p>\n

LayerZero also published its own statement attributing<\/a> the attack to Lazarus Group\u2019s TraderTraitor unit. The company said the protocol worked as designed and also pointed directly at KelpDAO\u2019s 1-of-1 DVN configuration as the cause, noting it had previously recommended multi-DVN setups to all integration partners.<\/p>\n

Security researcher Andy was blunter, calling<\/a> KelpDAO\u2019s decision to run a single DVN while holding $1.5 billion in user funds \u201cextremely irresponsible\u201d and warning that dozens of other protocols are running the exact same setup right now.<\/p>\n

The post DeFiLlama Co-Founder Suggests 3 Paths to Resolve $293M KelpDAO Hack Fallout<\/a> appeared first on CryptoPotato<\/a>.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

The $293 million KelpDAO hack on April 18 has left Aave, rsETH holders, and the wider DeFi ecosystem staring at a hole nobody quite knows how to fill. But on Sunday, DeFiLlama co-founder 0xngmi laid out three realistic options on the table and ran the numbers on each. Three Scenarios, None of Them Clean 0xngmi\u2019s […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-83417","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/83417","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=83417"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/83417\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=83417"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=83417"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=83417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}