Decentralized finance was "bent, not broken" after a $292 million exploit on April 18 exposed systemic vulnerabilities in the sector's infrastructure, according to investment bank Standard Chartered.

Market Context

The attack targeted KelpDAO and spilled into AAVE, the largest DeFi lender by volume. Stolen tokens were deployed as collateral to borrow other assets, triggering what the bank described as a classic bank-run dynamic. Major protocols scrambled to contain fallout while broader crypto markets watched for contagion risks.

Analysis

Standard Chartered's report highlights how the incident exposed both the fragility and maturity of modern DeFi systems. While the exploit drew parallels to past bridge hacks—cross-chain infrastructure has accounted for billions in cumulative losses—the response marked a significant evolution in sector resilience. AAVE, alongside a coalition of DeFi firms, committed more than $300 million to stabilize the system within days, helping normalize yields and arrest deposit outflows.

The bank noted that repeated exploits continue to erode confidence across the ecosystem, pushing both retail users and institutional players to the sidelines while inviting stricter regulatory scrutiny. Smart contract vulnerabilities, phishing attacks and cross-chain bridge flaws remain core risks, with interconnected blockchain infrastructure amplifying exposure when single points of failure are compromised.

Despite these headwinds, Standard Chartered maintained its projection that tokenized real-world assets will reach a $2 trillion market cap by end-2028, up from $35 billion in October 2025. Growth drivers include continued expansion in DeFi lending and stablecoin liquidity, the bank said.

JPMorgan offered a more cautious view, noting that persistent security flaws continue to weigh on DeFi's institutional appeal—a sentiment underscored by the KelpDAO exploit causing an estimated $20 billion impact on broader market confidence.

Key Numbers

- $292 million: size of the April 18 exploit targeting KelpDAO and spilling into AAVE

- $300 million+: committed by AAVE and coalition partners to stabilize the protocol post-exploit

- 38%: decline in liquidity protocol deposits following the attack

- 31%: drop in active loans during the liquidity crunch period

- $2 trillion: Standard Chartered's projected tokenized RWA market cap by end-2028

- $35 billion: baseline tokenized RWA market cap in October 2025

What to Watch

AAVE's V4 upgrade and the forthcoming Ethereum Economic Zone are expected to reduce reliance on cross-chain bridges—a frequent attack vector in major crypto exploits. Traders should monitor whether these structural upgrades attract institutional capital back into DeFi lending markets. Key upcoming catalysts include protocol governance votes on security proposals, stablecoin liquidity flows and any regulatory response from global watchdogs following high-profile exploit events.

Security audits for cross-chain infrastructure and insurance protocol adoption rates will serve as barometers for whether the sector can rebuild trust after repeated systemic shocks.