DeFi absorbs $292 million shock as AAVE-led rescue steadies markets: Standard Chartered
Decentralized finance (DeFi) was “bent, not broken” after a $292 million exploit on April 18 exposed systemic risks, according to investment bank Standard Chartered. The attack on KelpDAO spilled into AAVE, the largest DeFi lender, after stolen tokens were used as collateral to borrow other assets. The episode sparked a sharp liquidity crunch, with the liquidity protocol seeing deposits fall by roughly 38% and active loans by 31%, in what the bank described as a bank-run dynamic. Despite the shock, tokenized real-world assets are still expected to reach a $2 trillion market cap by end-2028, driven by continued growth in DeFi lending and stablecoin liquidity, the report said. “We still project that tokenised real-world assets (RWAs) will reach a market cap of $2 trillion by end-2028, up from $35 billion in October 2025,” wrote Geoff Kendrick, head of digital assets research at Standard Chartered, in the Wednesday report. Hacks and exploits remain a core risk in crypto, undermining trust in systems built on code rather than intermediaries. Smart contract bugs, phishing and cross-chain bridge flaws can expose large pools of locked assets, where a single weak point can trigger outsized losses. These risks are amplified by the complexity and interconnected nature of blockchain infrastructure. Cross-chain