Behind the DeFi TVL Halving: How the KelpDAO Hack and the Rise of RWA Are Reshaping the On-Chain Capital Landscape

Since 2026, the on-chain financial system has undergone a profound reshaping. After reaching a peak of approximately $164 billion in October 2025, total value locked (TVL) in decentralized finance (DeFi) has fallen to about $82 billion—nearly half. At the same time, the tokenized government bond market broke through $15.35 billion in May 2026, and the overall RWA market value rose to approximately $30.9 billion, up more than 200% year over year. Between ups and downs, on-chain capital is redefining where it “belongs”—and the driving forces behind this are far more than just fluctuations in the price cycle.

Is the halving merely a mechanical reflection of price fluctuations?

Market perceptions often treat a decline in TVL numbers as equivalent to capital leaving, but this conclusion needs to be corrected by the data. The core composition of TVL is calculated based on the market value of underlying assets such as ETH. When the price of ETH drops from near $4,800 to around $1,600, the total size of DeFi’s value locked is mechanically compressed due to valuation changes—even if no users actively withdraw their assets.

However, price fluctuations cannot explain everything. As of May 20, 2026, Ethereum’s DeFi TVL has fallen from $106.687 billion on January 15 to about $63 billion, shrinking by nearly 41% in four months. Ethereum’s share of DeFi TVL also dropped from 63.5% in early 2025 to around 54%. This suggests that beyond price factors, deeper forces are driving a structural shift in capital.

Why did one attack lead to a collapse of trust in on-chain capital?

On April 18, 2026, the cross-chain bridge of the liquidity re-staking protocol KelpDAO was attacked, and about $292 million was stolen, making it one of the largest DeFi security incidents since 2026. The attack was not caused by a flaw in the smart contract code. Instead, it resulted from KelpDAO’s rsETH LayerZero OFT bridge being configured with an unsafe 1-of-1 DVN (decentralized validator network), simplifying cross-chain message verification into a single point of failure.

The attacker compromised RPC nodes and launched a DDoS attack, forcing failover of the system to a node under their control. They then forged a cross-chain message and minted 116,500 rsETH “out of thin air” on the Ethereum mainnet, worth approximately $292 million. Even more concerning is that, according to research by Dune Analytics, about 47% of the LayerZero-powered applications across the entire chain are still using the same 1-of-1 vulnerability configuration, exposing asset volumes exceeding $4.5 billion. This means the KelpDAO incident is not an isolated accident, but exposes a widely existing systemic risk.

How did a cross-chain vulnerability cascade step by step into lending protocols?

The risks from the KelpDAO attack did not stop at the cross-chain bridge. The attackers used the forged rsETH as collateral to deposit into Aave, enabling leveraged borrowing. This resulted in about $200 million in bad debt for Aave and caused major markets such as WETH to freeze at 100% utilization for five days. Two bad-debt scenario reports published on Aave’s governance forum show that, under an even loss-sharing scheme, the protocol faces about $123.7 million in bad debt; if losses are borne only by L2 rsETH holders, the bad debt would rise to $230.1 million. Delphi Digital pointed out after the incident that Aave’s point-to-pool model in this type of attack exposes clear structural weaknesses— even if reserve factors are fully removed, Aave’s three major markets (WETH, USDT, USDC) still face approximately $52 million in annual ineffective losses.

Why did security incidents trigger a reshuffle in cross-chain infrastructure?

After the attack, the trust landscape for cross-chain infrastructure changed dramatically. LayerZero acknowledged that allowing official verification networks to serve high-value transactions with a 1/1 configuration was a serious mistake, and announced it would stop setting signing messages for single validators. Funds subsequently began migrating at scale: KelpDAO, Solv Protocol, Re, Tydro, and Lombard successively announced their migration from LayerZero to Chainlink CCIP. Lombard directly transferred more than $1 billion in Bitcoin-backed endorsement assets. If you look at the current TVL of major protocols, the combined size of these five parties already exceeds $3.4 billion; when adding institutional wrapped assets, the overall migration scale is around $4 billion. This migration wave signals a fundamental shift in how the market evaluates cross-chain infrastructure—redundancy in security configurations and diversity of validator networks have become core standards for infrastructure selection.

Why is the tokenized government bond market growing against the trend?

While DeFi capital is accelerating its outflow, the tokenized government bond market is charting a distinctly different growth curve. On May 13, 2026, the total locked value of tokenized US Treasuries reached $15.35 billion, surpassing the prior record of $15.1 billion in mid-April. The main driver behind this growth is changes in the macro policy environment. In April, the US CPI rose 3.8% year over year, higher than 3.3% in March, significantly boosting market expectations for Fed rate hikes. As of May 2026, the Federal Reserve’s benchmark interest rate remains in the 3.50% to 3.75% target range, and the 10-year US Treasury yield fluctuates between 4.25% and 4.32%.

The average annualized yield on tokenized Treasuries is about 3.36% to 3.41%, while the deposit rate on USDC in Aave V3 has fallen to around 2.7%. When the yield on low-risk on-chain assets begins to exceed the deposit rates of some DeFi lending protocols, capital naturally tends to flow toward options with greater certainty.

What is the intrinsic logic behind capital flowing from DeFi to RWA?

The capital migration between DeFi and RWA is not simply a case of one replacing the other; it reflects a systemic adjustment in investors’ risk preferences and return expectations. The accelerated outflow from DeFi is built on a combined foundation of technological and financial risks. Within a week after the Drift Protocol and KelpDAO attack events, protocols including Sky Protocol, Spark, Morpho, and EtherFi followed Aave and saw about a 10% drop in TVL. Ethereum’s DeFi TVL lost 10.5% in a week, and Aave’s outflow size is approaching $10 billion.

RWA provides an alternative allocation option. It does not rely on cyclic valuation and cross-nesting among DeFi protocols. Instead, it introduces the real asset value of instruments with external yield sources. The tokenized government bond market grew from about $3.9 billion at the beginning of 2025 to $15.35 billion today in just 16 months. This not only reflects accelerated institutional entry, but also indicates that on-chain capital is building a low-risk yield layer that exists independently of the DeFi cycle.

How does the macro interest rate environment indirectly shape on-chain capital flows?

DeFi lending rates are determined by the utilization rate of the liquidity pool, and there is no direct transmission mechanism from the Federal Reserve’s policy rates. However, the two are closely indirectly connected through investors’ asset allocation behavior. When the risk-free yield (i.e., US Treasury yields) stays at a high level above 4%, DeFi protocols need to offer a significant risk premium to retain capital. However, DeFi protocols also have to bear another cost—the potential losses implied by security incidents. The approximately $200 million in bad debt that appeared in Aave during the KelpDAO incident is, in essence, a realization of a risk premium. When this potential risk turns into actual loss, the market’s risk pricing for DeFi naturally adjusts accordingly. While RWA assets offer relatively limited yields, their returns are anchored to real-world economic output, and the assets themselves are supported by underlying collateral from traditional finance. In the current macro environment, this makes them inherently attractive to risk-averse capital.

Summary

On-chain capital has not left the crypto ecosystem. The total market cap of stablecoins has surpassed $320 billion and continues to expand, and the RWA scale is growing in parallel. This set of data clearly shows that capital remains on-chain—it is simply reselecting its allocation direction. The core issue for the market is no longer “Is the capital present?” but “Where should the capital be allocated?” DeFi’s way forward lies in restoring trust through more robust security architecture and building sustainable yield models; RWA needs to prove that its liquidity and scalability can meet institutional-level demand.

From the KelpDAO attack to the rise of tokenized government bonds, a clearer picture is emerging: on-chain capital is shifting away from a logic of chasing high yields toward systematically pricing security and return certainty. This process itself indicates that the crypto finance market is moving toward maturity.

FAQ

Q1: Why did DeFi TVL halve from $164 billion to $82 billion?

The main reasons can be summarized as three overlapping factors: first, the sharp pullback in underlying asset prices such as ETH mechanically reduced TVL when measured in USD; second, the trust crisis triggered by security incidents such as KelpDAO accelerated capital outflows; third, RWA products such as tokenized government bonds provide more certain low-risk yield options, diverting some capital.

Q2: What is the core vulnerability behind the KelpDAO attack? Why was it so severe?

The core vulnerability is that KelpDAO used a 1-of-1 DVN single-validator configuration, simplifying cross-chain message verification into a single point of failure. After the attackers infiltrated an RPC node, they forged cross-chain messages and minted tokens out of thin air, resulting in approximately $292 million in losses. According to Dune Analytics data, about 47% of LayerZero-based applications still have similar configuration risks.

Q3: What is the fundamental difference between tokenized government bonds and ordinary DeFi lending?

The yield on tokenized government bonds comes from the real coupon payments of US Treasuries, supported by real-world underlying assets, and therefore carries lower risk. By contrast, DeFi lending rates are determined by the utilization rate of the liquidity pool, leading to higher yield volatility and exposure to smart contract vulnerabilities and cross-chain risks. The current average annualized yield on tokenized government bonds is about 3.36% to 3.41%, which is already higher than the deposit rates of some mainstream DeFi lending protocols.

Q4: Will growth in the RWA market continue in the long run?

Growth in the RWA market is built on the macro environment in which the Federal Reserve maintains high interest rates. Data shows that the tokenized US Treasuries market grew from about $3.9 billion at the beginning of 2025 to $15.35 billion, increasing nearly fourfold in 16 months. Deep participation by institutional giants such as Circle and BlackRock, along with ongoing improvement in regulatory frameworks, provides structural support for sustained growth in RWA.

Q5: Can DeFi attract capital back in the future?

DeFi’s long-term viability depends on two core variables: first, whether it can build more robust security infrastructure and risk control systems; second, whether it can offer competitive risk-adjusted returns as alternative assets such as RWA continue to grow. Based on current trends, the boundary between DeFi and RWA is becoming less clear, and future developments are more likely to involve integration rather than zero-sum competition.