Aave chief defends protocol's 'resilience' after $8.45 billion bank run

The founder of the largest DeFi platform blamed "third-party” entities for decentralized finance’s vulnerabilities, while independent data highlights severe gaps in Aave’s own risk architecture.

What to know:

• A $292 million exploit of KelpDAO’s LayerZero bridge in April 2026 triggered an $8.45 billion, 48-hour deposit run on Aave, exposing the vulnerability of major DeFi platforms to bank-run-style stress.
• Aave survived the crisis only after a chaotic, human-led $300 million emergency bailout, including 25,000 ETH from the Aave DAO and 5,000 ETH from founder Stani Kulechov, despite his public framing of the episode as proof of the protocol’s resilience.
• In response, Aave is planning a V4 upgrade that will replace pooled token design with a modular hub-and-spoke system intended to localize risk, impose targeted premiums and freeze specific collateral lines to prevent future contagion from bridge failures.

Decentralized finance (DeFi) is recovering from a string of sophisticated exploits that have triggered an intense debate over whether public blockchain protocols can truly handle systemic risk.

The crisis peaked in April 2026, with the $292 million exploit of KelpDAO’s LayerZero-powered bridge triggered a devastating $8.45 billion deposit run on Aave, the world’s largest decentralized lending platform. The massive withdrawals occurred within 48 hours.

Stani Kulechov, founder and CEO of Aave Labs, defended Aave’s mathematical superiority over traditional finance at the Proof of Talk event in Paris last week. Rather than addressing the operational failures of a multi-million dollar liquidity crunch that nearly broke Aave’s insolvency shields, Kulechov pivoted to frame the massive capital flight as empirical proof of the network’s “resilience.”

"Aave's existing V3 infrastructure has seen multiple market cycles,” he said, adding that “Aave has been really resilient during really turbulent times."

However, a closer look at the April crisis reveals that Aave’s survival relied less on flawless autonomous design and more on a chaotic, human-led $300 million emergency bailout. The emergency recovery effort required a 25,000 ETH pledge from the Aave DAO and a personal 5,000 ETH ($8.4 million) contribution from Kulechov himself to stave off disaster.

Deflecting the blame

Kulechov separated core smart contract code from the external infrastructure failures impacting the wider market.

"When it comes to development as well... there are very few, actually any sort of issues in DeFi protocols' smart contracts generally," Kulechov argued. "They are actually third-party dependencies that are related to more traditional security that might have an impact across the DeFi space, as we've seen recently."

While technically precise, the April hack began with an RPC-spoofing and DDoS attack targeting LayerZero’s verifier nodes on KelpDAO rather than a bug in Aave's code. Risk analysts said that Kulechov’s defense side-steps a harsher reality.

Blockchain risk modeling firm LlamaRisk later revealed that the hackers used the exploit to mint worthless collateral, deposit it into Aave, and drain authentic wrapped Ether (wETH), leaving Aave V3 saddled with an estimated $123.7 million in bad debt. Furthermore, banking analysts at the Bank Policy Institute pointed out that Aave's inadequate insurance exposed how DeFi platforms are vulnerable to bank runs in detriment of their users.

Blueprint for V4

Kulechov did concede that the architectural threat of contagion requires a complete overhaul. To prevent future bridge failures from triggering systemic deposit runs, he noted that Aave Labs is using its upcoming V4 upgrade to fundamentally restructure its risk management.

Kulechov explained that Aave Labs is using its upcoming V4 tech upgrade to entirely redesign risk management with the aim of preventing future bridge exploits from triggering deposit runs.

Kulechov explained that under the new version, a modular "hub-and-spoke" system will replace traditional token pooling, enabling the core protocol to autonomously levy localized risk premiums and freeze specific collateral lines before contagion can reach primary lending reserves.

"When you have a completely auditable and public system, anyone can actually inspect the code and also do different kinds of risk analysis based on that. I think that is the key to building resilient software," he concluded.

​Whether institutional allocators will continue to overlook these multi-billion dollar "stress tests" while waiting for V4 to launch remains the defining question for DeFi's mainstream future.

More For You

Industry insiders warn that MiCA's steep financial barriers are choking early-stage innovation.

What to know:

• The European Union’s MiCA rules impose steep capital, legal and compliance costs that industry figures say effectively shut out smaller crypto startups while favoring large, well-funded financial institutions.
• Regulators argue that MiCA’s stringent requirements are necessary to protect consumers and build trust, even as traditional banks accelerate their move into...

Sam Bankman-Fried officially asks Trump for a presidential pardon

19 minutes ago

The startup killer: Ledger CTO says the EU's crushing compliance costs are choking Web3 innovation

22 minutes ago

Blame bitcoin's tumble on rising inflation, not Strategy, 10xResearch argues

1 hour ago

CoinDesk 20 performance update: NEAR gains 12.3% as almost all assets trade higher

2 hours ago

MetaMask launches AI agent wallet with built-in security for crypto trades

3 hours ago

Bitmine bought the dip, making its biggest ether purchase in 2026 as prices tanked

3 hours ago

Live updates: Bitcoin tops $63,000 as Strategy adds $100 million BTC in latest purchase

3 hours ago

Strategy buys 1,550 bitcoin, first time since selling $2.5 million worth of BTC

3 hours ago

Crypto's recovery remains elusive as SpaceX, Anthropic IPOs loom

4 hours ago

Bitcoin's rally to $63,700 triggers $504 million losses for short sellers, most since late April

10 hours ago

Zcash bounces 45% as developers propose new 'Ironwood' upgrade

7 hours ago

A crucial bitcoin market indicator is signaling that the worst of the crypto crash might be over

3 hours ago