The recent cyber attack on Kelp has highlighted vulnerabilities within decentralized finance (DeFi), affecting multiple protocols and resulting in a significant loss of approximately $293 million. The incident prompted Kelp to suspend operations concerning its restaking token, rsETH, as investigations commenced.
Industry experts, including Michael Egorov of Curve Finance, have underscored the risks associated with non-isolated lending on DeFi platforms. They emphasize the importance of ensuring that collateralized tokens avoid single points of failure. This incident is seen as a wake-up call for DeFi, which has suffered losses of around $482 million due to hacks and exploits in the first quarter of 2026.
Following the attack, at least nine other DeFi protocols, such as Aave and Compound Finance, have responded by freezing markets for rsETH to mitigate the impact. Experts warn that the challenge lies not only in preventing contract-level exploits but also in understanding the potential for rapid contagion across integrated platforms.