Kelp DAO Exploit Pushes DeFi Losses Past $600M

Kelp DAO's smart contracts were exploited in recent weeks, allowing an attacker to drain a significant portion of the project's treasury and related liquidity. On-chain records and sector trackers show the breach contributed to cumulative decentralized finance losses exceeding $600 million over that period.

Transaction data indicate the attacker used a vulnerability in Kelp DAO's contracts to move assets out of the project. Movements of the stolen tokens are visible on the blockchain and include transfers through mixing services and across multiple chains.

The breach occurred as crypto markets were under pressure. Outflows and forced liquidations tied to the incident coincided with a drop in aggregate total value locked, or TVL, across decentralized finance protocols to its lowest level in a year.

Several liquidity pools tied to Kelp DAO experienced rapid reductions in available funds as users withdrew deposits or had positions liquidated. Smart contract flaws and manipulation of off-chain price feeds, known as oracles, remain common attack methods in DeFi.

Project maintainers paused affected contracts and initiated forensic reviews. They engaged on-chain analytics firms and communicated with exchanges to trace funds, while informing token holders and the wider community of the incident and steps taken.

Kelp DAO is a decentralized autonomous organization that manages pooled assets and deploys capital into DeFi strategies and liquidity provisioning. TVL is a metric that sums the dollar value of assets locked in smart contracts across lending platforms, automated market makers, staking and other services.