Aave: Aave Labs and LlamaRisk published a formal incident report on April 20 quantifying the protocol's exposure from the April 18 Kelp rsETH exploit. The attacker deposited 89,567 rsETH across seven wallets and borrowed roughly $190 million in wrapped ETH and wstETH before markets were frozen. Two loss scenarios are outlined: Scenario 1 spreads losses across all rsETH holders via a 15% haircut, producing $123.7 million in bad debt with Ethereum Core taking the largest single hit at $91.8 million. Scenario 2 isolates losses to layer-2 rsETH, producing $230.1 million in bad debt concentrated on Mantle with a 71.45% WETH shortfall and Arbitrum with a 26.67% shortfall, while Ethereum mainnet rsETH would remain unaffected. The Aave Guardian extended the WETH freeze to Prime and all major L2 deployments on April 20. User withdrawals totaling $6.6 billion pushed WETH pools to 100% utilization, trapping remaining depositors and triggering a $300 million surge in stablecoin borrowing by users attempting to unlock positions. The DAO treasury holds $181 million as of April 20: $62 million in ETH-correlated holdings, $54 million in AAVE tokens, and $52 million in stablecoins. The protocol generated $145 million in revenue in 2025 and $38 million year-to-date in 2026. Final loss outcome depends on decisions Aave cannot control: how Kelp DAO allocates the shortfall and how the LRT oracle updates the rsETH exchange rate. Ethena: Ethena extended its LayerZero OFT bridge suspension beyond the initial six-hour window on April 20, citing the absence of a satisfactory root cause analysis of the rsETH incident. Ethena confirmed zero rsETH exposure. An updated proof of reserves released ahead of schedule shows USDe backed at approximately 101.20%, with total collateral exceeding $5.63 billion against a supply of roughly 5.56 billion USDe. Attestations were verified by Chainlink, Chaos Labs, LlamaRisk, and Harris & Trotter.