DeFi TVL Down 39% YTD Amid $942M in Hacks and Major Kelp DAO Exploit

What happened: The total value locked (TVL) in DeFi protocols fell from roughly $115B in January 2026 to just over $70B by June—a 39% drop, erasing about $45B. The sector was rocked by 121 security incidents year-to-date, with $942M stolen. Q2 2026 alone saw 83 exploits totaling $755M, the highest quarterly count on record. The largest was the Kelp DAO hack on April 18, where $292–293M in rsETH was minted via a LayerZero bridge exploit. The attacker deposited 90,000 rsETH into Aave V3, borrowing $190M+ and generating $196M in bad debt, leading to a $6.6B TVL drop for Aave and $15B in user withdrawals in four days.

Why it matters: While the scale of losses is significant, CryptoRank notes the current drawdown is less severe than the 2021–2022 bear market. The decline is driven by both cyclical market factors and security failures, not solely by hacks. The Kelp DAO incident exposed structural risks in liquid restaking tokens and cross-chain bridges. Industry leaders, including Lido Finance, EtherFi, and Aave founder Stani Kulechov, coordinated bailout proposals, highlighting the sector's capacity for rapid, if ad hoc, crisis response.

Source: Cointelegraph