Crypto Carnage: Aave’s WETH Pool Drowns in KelpDAO’s rsETH Swamp

by

Ah, the sweet scent of digital despair! Aave V3’s Wrapped Ether (WETH) reserve, once a proud fortress of decentralized finance, now lies in ruins, its vaults plundered by the cunning hands of exploiters who danced through KelpDAO’s rsETH like thieves at a carnival.

Comrade 0xQuit, a Solidity whisperer and auditor of the digital proletariat, raised the alarm on X, warning the masses that the WETH pool is but a shadow of its former self. Partial withdrawals, they say, may only come after Aave’s Umbrella-that grand savior of last resort-patches the gaping wound left by the exploit.

The Great rsETH Heist: A Tale of Greed and Code

The saga began with an attacker, no doubt sipping expensive coffee in some shadowy corner of the internet, funneling funds through Tornado Cash. Like a modern-day Robin Hood-except stealing from the already precarious-they drained 116,500 rsETH from KelpDAO, a haul worth over $290 million. What a time to be alive!

“If you have WETH on Aave V3 Core, withdraw now, ask questions later.” – Marc Zeller (@Marczeller), April 18, 2026

With their ill-gotten gains, the attacker marched into Aave V3, supplying the stolen rsETH as collateral and borrowing WETH like there was no tomorrow. But alas, the rsETH was as unbacked as a politician’s promise, leaving Aave holding the bag-a bag of WETH it can’t liquidate.

“Wish I had better news but looks like WETH on Aave is fucked. Withdraw if you can but likely too late,” quipped 0xQuit, the digital Cassandra of our times.

Umbrella: The Band-Aid for Aave’s Bleeding Wounds

Enter Aave’s Umbrella, the shiny new tool designed to mop up such messes. Launched in late 2025 to replace the old Safety Module, it’s now facing its first real test. Users who staked aWETH in the Umbrella vault will feel the sting of automatic slashing, their sacrifices necessary to cover the deficit. Capitalism, but make it decentralized!

Once the slashing is done, WETH suppliers may regain partial withdrawal access. But let’s not kid ourselves-full recovery is as likely as a fair election. Depositors, prepare for a haircut, and not the kind you’d pay for.

This fiasco marks the first major trial of Umbrella’s bad debt coverage. It also raises uncomfortable questions about the wisdom of whitelisting liquid restaking tokens as collateral. But hey, who needs stability when you can have innovation, right?

Meanwhile, the Upshift team, guardians of non-custodial vaults, have assured their users they’re as clean as a whistleblower’s conscience. No rsETH exposure here, they declare, though they’ve paused deposits and withdrawals to KelpDAO’s vaults as a precaution. Better safe than sorry, comrades!

“We are in touch with KelpDAO about a potential exploit of rsETH. As a precaution, the Kelp team have decided to temporarily pause deposits and withdrawals to the High Growth ETH and Kelp Gain vaults while their investigations take place. Upshift USDC, Core USDC and EarnAUSD vaults have zero exposure to rsETH. We will provide updates as we receive them from the Kelp team,” wrote Upshift, the voice of calm in the storm.

Read More

2026-04-18 22:56