[crypto]May 7, 2026 3 min read

Aave Partially Unfreezes WETH After Kelp Bridge Exploit

Aave has partially unfrozen WETH following a Kelp bridge exploit that forced the protocol to halt activity across several markets. When one of DeFi's biggest lending protocols has to hit the emergency brake, it's worth understanding exactly what broke and what it signals about the industry.

What Led to the Freeze

Aave sits at the top tier of decentralized lending, managing billions in total value locked across multiple chains. Cross-chain bridges like Kelp's have always been the soft underbelly of DeFi — they've been responsible for some of the largest thefts in crypto history, from Ronin to Wormhole. As liquid restaking tokens have multiplied, so has the attack surface they introduce into lending markets.

What Exactly Happened

Attackers exploited the Kelp bridge to deposit rsETH — Kelp's liquid restaking token — into Aave markets using fraudulent or manipulated inputs. With that compromised collateral in place, they borrowed Wrapped ETH (WETH) at scale, effectively pulling real liquidity out of the protocol backed by potentially worthless assets. Aave's risk mechanisms responded by freezing WETH across multiple markets to stop further exposure from accumulating. After assessing the actual damage and containing the situation, the protocol moved to partially restore WETH functionality, letting legitimate users get back to business. Exact figures on the total amount involved are still being worked through by the community.

What This Really Means

The fact that Aave could freeze assets quickly is — counterintuitively — a sign the protocol's emergency systems work. But it also lays bare a structural tension at the heart of DeFi: the composability that makes these protocols powerful is the exact same property that makes them exploitable. When compromised rsETH can drain real WETH liquidity, the vulnerability isn't just Kelp's problem or Aave's problem — it's a systemic one. Short-term losers are the users locked out during the freeze; the attackers, who have almost certainly already moved funds, came out ahead.

What Comes Next for Aave and the Industry

Aave will need to take a hard look at how it handles collateral risk for assets that originate from external bridges — particularly liquid restaking tokens, which are multiplying faster than risk frameworks can keep up with. Expect governance proposals tightening collateral requirements for this asset class to surface soon. At the industry level, this exploit adds more weight to the argument for stricter, standardized auditing requirements for cross-chain bridge infrastructure — an area where technical standards remain far behind the pace of innovation.

The open question is whether Aave's ability to freeze user funds unilaterally will be seen as a safety feature or a centralization red flag — and how that perception shapes the next wave of DeFi users.