DeFi 'Bent, Not Broken' After $292 Million KelpDAO Hack, Standard Chartered Says; $2 Trillion RWA Outlook Maintained

Key Takeaways Standard Chartered says DeFi was "bent, not broken" by the $292 million KelpDAO exploit on April 18, which triggered a bank-run dynamic at AAVE with deposits falling 38% and active loans dropping 31%A $300 million industry backstop led by AAVE and a coalition of DeFi firms helped stabilize the system, with yields normalizing and deposits recoveringStandard Chartered maintained its forecast that tokenized real-world assets will reach a $2 trillion market cap by end-2028, up from $35 billion in October 2025AAVE's V4 upgrade and the forthcoming Ethereum Economic Zone aim to reduce cross-chain bridge dependency -- a primary attack vector in the KelpDAO exploitJPMorgan said hacks and stagnant capital levels continue to weigh on DeFi's institutional appeal, citing a $20 billion hit from the KelpDAO incident The $292 million exploit on KelpDAO on April 18 sent shockwaves through decentralized finance, triggering contagion at AAVE and exposing the systemic vulnerabilities of interconnected blockchain infrastructure -- but Standard Chartered argues the sector's response demonstrated a new level of institutional maturity that leaves its long-term outlook intact. In a Wednesday research report, Geoff Kendrick, head of digital assets research at Standard Chartered, described DeFi as having been "bent, not broken" by the attack, and maintained the bank's projection that tokenized real-world assets will reach a $2 trillion market cap by end-2028. "We still project that tokenised real-world assets will reach a market cap of $2 trillion by end-2028, up from $35 billion in October 2025," Kendrick wrote. How the Contagion Spread The KelpDAO exploit triggered a cascading effect that extended well beyond the initial hack. Stolen tokens were used as collateral on AAVE, the largest DeFi lending protocol, to borrow other assets -- a mechanism that rapidly spread the damage across the ecosystem. The resulting liquidity crunch saw AAVE deposits fall by approximately 38% and active loans drop by 31% in what Standard Chartered described as a bank-run dynamic, as users rushed to withdraw capital amid uncertainty about exposure and solvency. The episode highlighted the amplifying risks inherent in DeFi's interconnected architecture. Cross-chain bridges -- while expanding functionality across blockchain networks -- widen the attack surface significantly, and have accounted for billions in aggregate losses due to complex designs, shared validation systems, and intricate cross-chain mechanics that create multiple potential failure points. Industry Backstop Stabilizes the System AAVE and a coalition of DeFi firms moved rapidly to contain the damage, committing more than $300 million to stabilize the protocol. According to Standard Chartered's report, the intervention succeeded in normalizing conditions, with borrowing yields easing and deposits beginning to recover. The speed and scale of the industry response was cited as evidence of growing DeFi institutional maturity -- a sector capable of self-organizing a credible backstop without relying on centralized intermediaries or government intervention. Structural Upgrades Accelerated Standard Chartered noted that the incident is accelerating planned infrastructure improvements. AAVE's V4 protocol upgrade and the forthcoming Ethereum Economic Zone are both designed to reduce reliance on cross-chain bridges -- the primary attack vector in the KelpDAO exploit and a recurring vulnerability across major DeFi hacks. The upgrades represent a structural response to a structural weakness rather than a cosmetic patch. JPMorgan Takes a Harder Line Not all institutional observers share Standard Chartered's measured optimism. JPMorgan said the KelpDAO exploit and its broader market impact -- estimated at a $20 billion hit to DeFi capital levels -- underscore the persistent barriers to institutional adoption of decentralized finance. The bank highlighted hacks and stagnant capital formation as the two primary factors suppressing DeFi's appeal to regulated institutional participants, a more skeptical read of the sector's resilience than Standard Chartered's assessment. The divergence between the two Wall Street banks reflects a broader institutional debate about DeFi's trajectory -- one that will likely be resolved less by individual opinions than by whether the structural upgrades being accelerated by the KelpDAO aftermath can demonstrably reduce the frequency and scale of future exploits.