AAVE TVL FALLS TO $16 BILLION AS DEFI CONTAGION DEEPENS AND 2026 TRACKS AS WORST YEAR FOR PROTOCOL HACKS Aave’s total value locked fell to approximately $16 billion Tuesday, down from $26.5 billion before the Kelp DAO exploit on Saturday — a loss of roughly $10.5 billion in four days. The AAVE token is down 18% since the hack to approximately $93. Open interest in AAVE futures surged to a record 3.59 million tokens as traders positioned aggressively, pointing to elevated volatility risk ahead. Ledger’s chief technology officer said 2026 is shaping up to be DeFi’s worst year in terms of hacks, with the Kelp exploit demonstrating how a single point of failure in cross-chain infrastructure can cascade across systems. The mechanics driving ongoing outflows: attackers used 116,500 rsETH stolen from Kelp’s LayerZero bridge as collateral on Aave to borrow approximately $196 million in wrapped ETH. Because the underlying rsETH is worthless, those positions cannot be liquidated normally, leaving Aave with bad debt concentrated in the rsETH-WETH pool. Total DeFi TVL across all protocols fell $14 billion in two days following the exploit to approximately $85 billion, its lowest level in one year and roughly 50% below October 2025 peaks, per DefiLlama. The contagion spread beyond directly affected protocols, with users withdrawing from unrelated platforms on generalized fear of cross-chain exposure. April 2026 cumulative DeFi losses now exceed $605 million across more than 12 protocols. The Kelp exploit at $292 million remains the largest single incident of the year, surpassing the Drift exploit at $285 million on April 1. The Grinex exchange hack at $13 million on April 16 and the Aave-specific bad debt of $196 million from the Kelp fallout bring the month’s total damage across exploits and contagion to an industry record for a single month. Cross-chain bridge infrastructure and layered restaking architectures are now under broad review, with multiple protocols pausing bridge integrations pending security audits.