Aave 上 3 億美元的借貸激增預示著漏洞利用後的流動性緊縮

📄完整原文· 由 trafilatura 自动抓取7679 字

A $300 million borrowing spike on Aave signals liquidity crunch after exploit The aftershocks of the Saturday's KelpDAO hack are spreading through stablecoin markets in ways that were not immediately obvious. What to know: - A massive exploit of KelpDAO's rsETH token led an attacker to drain about $292 million in value, primarily by depositing unbacked tokens into Aave and borrowing real assets against them. - In the 24 hours after the hack, whales rapidly pulled more than $6 billion from Aave, pushing major pools like ETH, USDT and USDC to 100 percent utilization and effectively trapping remaining depositors' funds. - Stranded users then borrowed roughly $300 million against their own locked stablecoin deposits at steep losses, underscoring how a single DeFi exploit can freeze liquidity across multiple markets even when core protocol code remains intact. The aftershocks of the Saturday's KelpDAO hack are spreading through stablecoin markets in ways that were not immediately obvious. Int he first 24 hours post the attack, users on Aave borrowed approximately $300 million against their tether deposits of stablecoin tether The borrowing spike isn’t a sign of demand; it is a sign users can’t withdraw. With stablecoin pools maxed out, depositors are taking loans against their own funds at a loss just to access liquidity. Think of it this way: Imagine a bank refusing to process customer fiat deposit withdrawal requests. So, out of desperation, customers take out loans on these deposits. This credit creation isn't healthy, but a desperate move for liquidity. "We're now seeing some negative secondary effects of illiquidity in Aave stablecoin markets," said monetsupply.eth, the pseudonymous head of strategy at Spark, a rival DeFi lending platform. "Because users can't withdraw due to 100% utilization, there has been a ~$300 million increase in borrowing with USDT collateral in just the past day since the rsETH exploit." To understand how a single exploit on KelpDAO ended up locking every stablecoin exit on Aave simultaneously, you need to understand how the system is supposed to work — and exactly where it broke. What is Aave and how it's supposed to work Aave is a decentralized finance (DeFi) protocol that enables users to lend and borrow cryptocurrencies without intermediaries. Think of it as a bank, except it runs entirely on code on a public blockchain, with no human gatekeepers. Users deposit assets into lending pools and earn interest. Others borrow from those same pools by posting crypto assets as collateral, which exceeds the loan amount. The system is designed to self-correct automatically through interest rates. When lots of people want to borrow, rates rise, making borrowing more expensive and encouraging lenders to deposit more. When demand falls, rates drop. The whole system operates on one core assumption: that there is always enough liquidity – enough assets in the pool – for lenders to withdraw their deposits when they want to, and for borrowers to unwind their positions when they need to. When that assumption breaks down, everything else breaks with it. That's what happened after the KelpDAO exploit. rsETH and the KelpDAO exploit rsETH is a liquid re-staking ether token issued by KelpDAO. When you stake ether (ETH), you lock it up to help secure the Ethereum network in exchange for a yield, similar to earning interest on a bond. Some protocols issue a liquid staking token (LST) that represents your staked ETH. Re-staking goes a step further, reusing those already-staked assets to secure additional systems, effectively stacking yield on yield. In return, you receive a receipt token representing your position. rsETH is one such receipt token and it has been widely used as collateral across the DeFi world. On April 18, an attacker manipulated KelpDAO's bridge infrastructure into releasing 116,500 rsETH — roughly 18% of the token's circulating supply, worth approximately $292 million. These fake, unbacked tokens were immediately deposited into lending protocols, mostly Aave, to borrow real ETH and other assets such as wrapped ether (wETH) against them. Fake tokens in, real money out. "That [borrowed] WETH is gone. The rsETH holding its place in the vaults is worth whatever an unbacked claim is worth — approaching zero on the L2 side, where 20+ chains held bridged rsETH backed by a now-empty mainnet lockbox," 0xyanshu, a pseudonymous crypto operator known for work around on-chain finance and risk, said. Aave froze rsETH markets on V3 and V4 within hours, with founder Stani Kulechov affirming the exploit was external and Aave's contracts were not compromised. That freeze stopped the bleeding. But it also set off the chain reaction that produced the $300 million borrowing surge. How $300 million in borrowing materialized in a single day When the exploit news broke, whales and big funds withdrew billions of dollars worth of cryptocurrencies from Aave's liquidity pools within hours. Because they moved first and in large numbers, their withdrawals drained liquidity pools. "When the rsETH exploit happened and AAVE incurred bad debt, whales like Justin Sun, MEXC exchange, and others immediately withdrew billions from AAVE," analyst Duo Nine, said in an explainer. "Initially, the ETH market hit 100% utilization, meaning you could not withdraw your ETH from AAVE." This soon spread to USDT and USDC pools, raising their utilization rates to 100%, as over $6 billion in assets left the protocol within hours. Every lending pool holds a fixed amount of assets deposited by users. When every dollar of those assets has been borrowed out, nothing remains for withdrawals. "That's because AAVE lost over $6 billion in liquidity in the past 24h," Duo Nine wrote. "As whales took out their money, USDT and USDC also hit 100% utilization. These markets are now also stuck with money locked." This is when the $300 million secondary borrowing surge began. Trapped USDT and USDC depositors, unable to simply withdraw their money, reached for the only exit still available to them. They began by drawing loans from their locked deposits. "Some users decided to borrow against USDT/USDC and exit via other markets at a 10-25% loss," Duo Nine explained. "Basically you borrow GHO/DAI/USDe against your locked USDT/C." It was not a trading strategy. It has been a desperate act of borrowing against their own money at a loss, accepting 75 cents on the dollar, just to extract any liquidity from the system at all. Aave allows users to borrow up to 75% of the total loan-to-value (LTV) of their deposited collateral, depending on the asset and its risk parameters. "With a 75% max LTV, users with stuck USDT deposits can take out up to 3/4 of the value of their Aave position. But this ends up reducing liquidity in other markets, with USDC and USDe markets now at 100% utilization as well," monetsupply.eth, the pseudonymous head of strategy at Spark, a rival DeFi lending platform, observed. For anyone watching DeFi from the outside, the message is clear: "Decentralized" does not mean "without risk." More For You Bitcoin traded at $74,335 after Iran reimposed controls on the Strait of Hormuz over the weekend, with the modest 1.6% pullback standing out against a 5.7% jump in Brent and a 1.2% drop in European equity futures. What to know: - Bitcoin has proved more resilient than oil and equities to the latest Iran-related flare-up, slipping only modestly even as traditional markets reprice Middle East risk. - The latest escalation, including renewed controls on the Strait of Hormuz and U.S. threats against Iranian infrastructure, has reversed a three-week unwind of war-risk premiums...

数据状态✓ 已抓取全文阅读原文（CoinDesk）

🔍历史类似事件· 关键词 + 标的比对6 则

2026-04-20

Aave 上 3 億美元的借貸激增預示著 KelpDAO 被攻擊後的流動性緊縮

相似度 480%關鍵字 aave/exploit/signals

2026-04-20

在 Kelp DAO 橋接漏洞引發 DeFi 混亂後，Aave 可能面臨高達 2.3 億美元的損失

相似度 230%關鍵字 aave/exploit/million

2026-04-19

Kelp DAO 遭攻击引发 Aave 流动性紧缩，62 亿美元提款恐慌

相似度 230%關鍵字 aave/exploit/crunch

2026-04-23

SPARK 暴涨 100%，此前 SparkLend 吸纳了因 Aave 遭攻击而撤出的数十亿美元资金

相似度 180%關鍵字 aave/exploit/after

2026-04-22

交易员认为 Kelp 不会让用户分摊 2.92 亿美元被盗事件的损失

相似度 180%關鍵字 million/exploit/after

2026-04-21

链上分析师指出，在 rsETH 冻结几分钟后，与 Justin Sun 关联的钱包从 Aave 撤出了 2.74 亿 USDT

相似度 180%關鍵字 aave/million/after

💡 目前用关键词 + 标的比对（MVP）· 之后会升级为 embedding 语义搜寻

原始信息

ID：8018d0ba5f

来源：CoinDesk

发布：2026-04-20 08:27:53

分类：一般 · 导出分类 neutral

标的：未指定

社群投票：+0 / −0 · ⭐ 0 重要 · 💬 0 留言