The market repriced DeFi in just 48 hours
Bartolomeo argues that last weekend the market achieved – in real time – a notable feat that no regulator, auditor or commentator has ever done.
The mispricing
Rank the dollar-credit options by yield before last weekend, and the hierarchy made no sense. Treasury overnight: 3.64%. Ledn’s investment-grade Bitcoin-backed ABS senior tranche, priced in February at BBB-: 6.84%. Strategy’s STRC perpetual preferred: 11.50%. U.S. credit cards: 21% against a 4% default rate. And Aave, sitting well below it all: 2.32%.
Something had to give. Luca Prosperi argued earlier this year that DeFi stablecoin rates should carry a 250–400 basis-point premium over the risk-free rate, implying 6.15–7.76%. The Bank of Canada’s April 2nd report took the opposite view, citing Aave’s 0.00% non-performing loan rate as proof that DeFi’s architecture delivers defaultless lending through strict collateral requirements and price-based enforcement.So what does this all mean? Either DeFi had solved credit risk, or the market had stopped pricing it.
Only one side could be right. Last weekend, we found out which.
The 1/1 problem
On April 18th, an attacker exploited Kelp DAO’s LayerZero-powered cross-chain bridge to mint roughly 116,500 unbacked rsETH tokens — about 18% of the circulating supply, worth around $292 million. The synthetic tokens were moved into Aave as collateral. The attacker borrowed an estimated $190–230 million of real assets against collateral that, when it mattered, didn’t exist. Aave’s incident report acknowledged the protocol functioned as designed; the shortfall is structural, not technical. Kelp and LayerZero have since publicly blamed one another for the 1/1 validator configuration that made the exploit trivial.
The contagion was instant. DeFi protocols are interoperable by design, and “looping” — borrowing on one platform and redepositing the proceeds as collateral on another — means a hit to Aave is a hit to everything built on top of Aave. Roughly 20% of Aave’s historical borrow volume has come from recursive leverage. Within 48 hours, $6–10 billion in net outflows left Aave. Utilization on WETH, USDT, and USDC pools hit 100%. Depositors couldn’t withdraw. Borrowers couldn’t source stablecoin liquidity. Stranded users borrowed another $300 million against their own locked stablecoin deposits at 75% LTV, often at a loss, just to access cash.
Rates responded accordingly. Aave stablecoin deposit APYs went from 3–6% pre-exploit to 13.4% within two days. Morpho’s USDC vault, which powers Coinbase’s consumer loan product, jumped from 4.4% APR on April 18th to 10.81% the next day as the liquidity scramble rippled outward. Total DeFi TVL across the top 20 chains fell by more than $13 billion.
