Aave 蒸發 80 億美元 TVL、跌出 DeFi 龍頭寶座：51 億穩定幣卡死、Umbrella 安全模型首度測試壓力

📄完整原文· 由 trafilatura 自動擷取Gemini 翻譯2474 字

A bridge vulnerability caused Aave to lose nearly $8 billion in TVL in a single day, forcing it to relinquish its title as the largest DeFi protocol and subjecting the Umbrella security model, introduced in 2025, to its most rigorous stress test yet—if reserves are insufficient to cover the $195 million in bad debt, stkAAVE holders will be the first to absorb the losses. (Context: The biggest DeFi incident of 2026: Kelp hacked for $292 million, Aave faces nearly $200 million in bad debt, and rsETH backing collapses) (Background: Kelp DAO’s rsETH cross-chain bridge hacked for $292 million! Triggers chain-reaction freezes across Aave and Compound) DeFiLlama data shows that Aave’s TVL plummeted from $26.4 billion to $18.6 billion in a single day, evaporating nearly $8 billion—the largest single-day asset exodus for a DeFi blue-chip protocol since the Terra collapse in 2022. What caught the market's attention wasn't just the numbers, but the structural implications: Aave has fallen from its position as the largest DeFi protocol, surrendering a title it held for over two years. The AAVE token dropped from $112 to $89.5 in 25 hours, a decline of over 20%. The numbers are more direct than any language: the impact on Aave goes beyond TVL figures. At the peak of the event, both the USDt and USDC pools on Aave v3 reached 100% utilization—in other words, over $5.1 billion in stablecoins were "effectively impossible to withdraw" unless new liquidity was injected or existing borrowers actively repaid their loans. This is not a technical description, but a liquidity crisis at the protocol level: depositors locked their funds into Aave only to find they could not withdraw them within a specific time window. Lookonchain data further revealed the withdrawal path—MEXC pulled out $431 million in a single transaction, followed by Abraxas Capital with $392 million. Together, these two withdrawals totaled over $800 million, marking the largest institutional-level exit during this wave. The chain reaction spread simultaneously. Curve Finance, Ethena, and BitGo WBTC successively suspended the use of the LayerZero bridge; Aave proactively froze rsETH positions on v3 and v4, as well as wETH markets across Ethereum, Arbitrum, Base, Mantle, and Linea. SparkLend, Fluid, and Upshift were also affected. The TVL of the entire DeFi ecosystem fell from $99.5 billion to $86.3 billion after the event, a total evaporation of $13.2 billion. The true novelty of this incident lies not in the attack itself—the Kelp DAO LayerZero bridge vulnerability has been detailed in previous reports—but in the fact that it unexpectedly triggered a public examination of Aave’s core security architecture. In June 2025, Aave introduced an automated bad debt protection mechanism called Umbrella. The design logic is: users can stake assets to earn rewards, while these staked funds act as the first buffer when the protocol incurs bad debt. The selling point of this model is that it "automatically absorbs losses without the need for governance voting," and it was seen as an architectural upgrade over Aave’s older Safety Module. Now, Umbrella is facing a $195 million bad debt gap—the 116,500 rsETH ($293 million) stolen by the attacker was deposited into Aave v3 as collateral, used to borrow wETH, and then drained, leaving behind about $195 million in bad debt. The key question is simple: are Umbrella’s reserves sufficient? If not, the losses will be transferred to stkAAVE holders as designed—those users who staked AAVE to "earn rewards." This is not just a matter of financial risk, but a moment where the definition of risk is being rewritten: you thought you were here to earn yield, but the contract tells you that you are also the final buffer against losses. This shift offers an interesting contrast. A study released earlier this month by the Bank of Canada pointed out that Aave v3 had successfully shifted risk to "borrowers" through over-collateralization and automated liquidation mechanisms—borrowers bore the losses when liquidated, keeping lenders relatively safe. But this time, if Umbrella reserves are insufficient, the risk will be shifted to "stkAAVE holders" rather than borrowers. Aave’s path of risk socialization has quietly changed its target. rsETH is a liquid restaking token. The characteristic of such assets is that their value is anchored to underlying assets (ETH restaking positions), but their liquidity relies

資料狀態✓ 已擷取全文閱讀原文（動區 BlockTempo）

🔍歷史類似事件· 關鍵字 + 標的比對6 則

2026-04-28

Aave 救援行動「DeFi United」募得 3 億美元，Consensys 帶頭捐 3 萬枚 ETH

相似度 220%關鍵字 aave/億美元/defi同分類 zh

2026-04-19

Aave 的 TVL 下跌 60 億美元，Kelp 駭客事件暴露了該 DeFi 借貸平台的結構性風險

相似度 180%關鍵字 tvl/aave/defi

2026-04-28

Aave 砸 3 億鎂搞 DeFi United 救援生態：聯手 Consensys、Lido、EtherFi 填史上最大坑

相似度 170%關鍵字 aave/defi同分類 zh

2026-04-27

ConsenSys 與 Joseph Lubin 豪砸 3 萬枚 ETH 匯入「DeFi United」，助力化解 Aave 壞帳危機

相似度 170%關鍵字 aave/defi同分類 zh

2026-04-27

Aave 領五大協議聯合提案：要 Arbitrum DAO 解凍 30K ETH，匯入「DeFi United」以恢復 rsETH 抵押

相似度 170%關鍵字 aave/defi同分類 zh

2026-04-26

全產業聯手救 Aave 兩億鎂壞帳，DeFi United 真能填補巨額缺口？

相似度 170%關鍵字 aave/defi同分類 zh

💡 目前用關鍵字 + 標的比對（MVP）· 之後會升級為 embedding 語意搜尋

原始資訊

ID：f47b89ca18

來源：動區 BlockTempo

發佈：2026-04-20 07:48:33

分類：zh_news · 導出分類 zh

標的：未指定

社群投票：+0 / −0 · ⭐ 0 重要 · 💬 0 留言