Ethereum (ETH)

DeFi just went through one of its clearest stress tests yet, and the cracks showed fast. In the first 20 days of April 2026 alone: 🔹 $605M+ lost 🔸 12+ protocols impacted 🔹 Bridges, LRTs, and lending all hit at once This unfolded as multiple failures within a tightly connected system 🧵

It started with @DriftProtocol, but the implications were much wider than a single exploit. 🔹 ~$285–286M drained on April 1 🔸 Admin-level compromise, not a contract bug 🔹 Linked to Lazarus Group operations 🔸 Funds pulled across multiple vaults quickly This highlights how sensitive access control can be at the protocol level.

@KelpDAO is where things escalated and where the structure started to break. 🔹 ~$292–293M exploit tied to rsETH 🔸 ~18% of total supply affected 🔹 Cross-chain representation compromised 🔸 No underlying ETH actually moved The balances existed, but the backing didn’t. https://t.co/FZwqCW2HvI

The root cause traces back to a bridge setup that had no margin for error. 🔹 Single-verifier configuration (1/1) 🔸 No independent validation 🔹 RPC endpoints manipulated via @LayerZero_Core infrastructure 🔸 Malicious message accepted as valid Once that message went through, every connected system treated it as real.

From there, the issue moved straight into lending markets. 🔹 Unbacked rsETH deposited into @Aave 🔸 Used to borrow real WETH 🔹 $200M+ extracted 🔸 Collateral couldn’t be redeemed That flow is what allowed the impact to propagate quickly across systems.

@Aave ended up carrying the weight of that breakdown. 🔹 ~$177M – $236M bad debt range (≈$196M midpoint) 🔸 Concentrated in rsETH/WETH markets 🔹 WETH utilization pushed to 100% 🔸 Withdrawals became constrained Nothing in the contracts failed directly, but the inputs they relied on were already compromised.

Once users caught on, the reaction was immediate. 🔹 $5.4B – $6.2B withdrawn 🔸 Whale exits accelerated panic 🔹 Liquidity thinned out unevenly 🔸 Market pricing adjusted fast When confidence drops, capital doesn’t wait around. https://t.co/A9bln3BUzL

The effects didn’t stay contained for long. 🔹 9+ protocols paused or restricted activity 🔸 @sparkdotfi, @Ethena, and others halted integrations 🔹 ~$13B wiped from total DeFi TVL in about 48 hours 🔸 Cross-chain exposure widened the impact This level of interconnectedness also increases how quickly risk can propagate across integrations.

The attribution adds another layer to how this played out. 🔹 Lazarus-linked group across both @DriftProtocol and @KelpDAO incidents 🔸 Different entry points, same level of coordination 🔹 Governance and infrastructure are both targeted 🔸 Execution spread over time These patterns point to a deliberate understanding of how the system operates.

There’s a pattern underneath all of this. 🔹 Bridges relying on minimal validation 🔸 Collateral frameworks often relying on assumed backing integrity 🔹 Risk models focused on isolated systems 🔸 Composability increasing exposure As one analyst put it, this exposed the fragility of the entire system.

2026 is already shifting how risk in DeFi is being understood. 🔹 $137M+ lost in Q1 🔸 $600M+ added in weeks 🔹 Bridges are still a weak point 🔸 Lending amplifies downstream impact This raises questions around how current design assumptions hold under stress. Where does the redesign start?