What happened to Aave during the $8.45 billion DeFi bank run?

Aave experienced an $8.45 billion withdrawal wave over 48 hours after a $292 million exploit involving KelpDAO’s LayerZero-powered bridge triggered panic across DeFi markets. Users rushed to remove funds amid concerns about potential losses and protocol exposure.

Why did the Aave deposit run start?

The crisis began after attackers exploited KelpDAO's LayerZero bridge and allegedly created worthless collateral that was later used within the DeFi ecosystem. The incident raised fears about counterparty risk and caused depositors to withdraw funds from Aave rapidly.

Did Aave's smart contracts fail during the crisis?

According to Aave founder Stani Kulechov, the protocol's core smart contracts were not directly exploited. He argued the problem originated from third-party infrastructure vulnerabilities rather than flaws in Aave's underlying code.

How much financial damage did the exploit cause Aave?

Risk analysis firm LlamaRisk estimated that Aave V3 was left with approximately $123.7 million in bad debt. The losses reportedly resulted from attackers using fraudulent collateral to borrow legitimate wrapped Ether (wETH).

How did Aave avoid a larger collapse?

Aave relied on a $300 million emergency support package during the crisis. The rescue included a 25,000 ETH commitment from the Aave DAO and a personal 5,000 ETH contribution from founder Stani Kulechov.

Is the Aave crisis good or bad for AAVE token holders?

The situation is mixed. Aave survived one of the largest stress events in DeFi history, which supports the protocol's durability, but the need for emergency intervention raises concerns about risk management and whether future crises could require similar actions.

What does the Aave V4 upgrade aim to fix?

Aave V4 is designed to reduce contagion risk across the protocol. The planned hub-and-spoke architecture would allow specific collateral pools to be isolated, frozen or assigned higher risk premiums before problems spread throughout the wider lending system.

Image for illustrative purposes only. Not a real photo.

Aave survives $8.45B DeFi bank run

Written by Mahathir BayenaPublished Jun 9, 2026, 12:16 AM

Aave founder Stani Kulechov defended the protocol’s resilience after the largest DeFi lending platform endured an $8.45 billion deposit run following a $292 million exploit involving KelpDAO’s LayerZero-powered bridge.

The crisis unfolded over 48 hours in April 2026 as users rapidly withdrew funds amid concerns that attackers had exploited external infrastructure weaknesses to create worthless collateral and drain legitimate assets from the protocol.

Kulechov said at the Proof of Talk conference in Paris that “Aave has been really resilient during really turbulent times,” arguing that the protocol’s core infrastructure had successfully navigated multiple market cycles despite recent stress.

The recovery effort required an emergency $300 million backstop, including a 25,000 ETH commitment from the Aave DAO and a personal contribution of 5,000 ETH from Kulechov, highlighting the extent of intervention needed to restore confidence.

While Kulechov attributed the crisis to vulnerabilities in third-party infrastructure rather than flaws in Aave’s smart contracts, risk analysis firm LlamaRisk estimated the exploit left Aave V3 with approximately $123.7 million in bad debt after attackers used fraudulent collateral to borrow wrapped Ether.

The episode intensified debate over whether decentralised finance protocols can withstand systemic shocks without relying on discretionary intervention, with critics arguing the event exposed weaknesses in DeFi insurance and risk management frameworks.

To address those concerns, Aave is developing its V4 upgrade, which will replace pooled token architecture with a modular hub-and-spoke model capable of applying localised risk controls, charging targeted risk premiums and isolating problematic collateral before contagion spreads across the broader protocol.

At the time of reporting, Aave price was $63.42.