Curve founder Michael Egorov said on April 19 that an exploit involving KelpDAO triggered losses of about 292 million U.S. dollars and created substantial bad debt on lending platform Aave.
He argued the scale of the damage was driven by the “non-isolated lending” model used in much of decentralized finance (DeFi), where assets share the same collateral pool and balance sheet. According to Egorov, this structure boosts scalability and capital use, but also allows risk from one asset to spread quickly across an entire protocol.
On-chain data showed Aave’s total value locked (TVL) dropping from roughly 27 billion dollars to under 25 billion dollars within hours of the exploit becoming public. Aave’s token fell more than 10% intraday as the market digested reports of unbacked rsETH collateral. Estimates put Aave’s bad debt from the worthless collateral between 177 million and 200 million dollars.
Major loss and knock-on impact
Under Aave’s current non-isolated approach, assets and liabilities are aggregated into a single pool to simplify user interaction and increase capital efficiency. Egorov said this design meant that when rsETH was exploited, the shock did not stay within rsETH positions.
Instead, because rsETH and Wrapped Ether (WETH) shared the same risk pool, the exploit created a deficit in the main WETH market. All liquidity providers in that pool were indirectly exposed to rsETH, even if they had never touched the asset, because they effectively shared the same balance sheet.
Egorov contrasted this with the fully isolated model used by Curve Finance. In a fully isolated system, each market or asset pair is ring-fenced. If an rsETH market were compromised, the damage would remain within that specific market. Activity in other markets, such as ETH/USDC, would continue unaffected because the architecture prevents one asset’s failure from endangering another.
How the risk spread
Egorov outlined two alternatives to the non-isolated model:
- Full isolation: Each asset or pair is in a separate market. This sharply limits contagion but reduces flexibility, as capital cannot move as freely across markets.
- Hybrid or semi-isolated structures: Markets are grouped into segments that share some liquidity but not all, partially distributing risk. This offers a middle ground but requires more complex governance, parameter tuning, and monitoring.
He described Aave’s planned “hub-and-spoke” architecture in its upcoming version 4 as a move toward this semi-isolated approach. Under that design, a central “hub” would hold shared liquidity, while “spokes” represent distinct market groups with internal firewalls. Losses in one spoke should be contained and not automatically threaten the entire protocol.
Isolation versus hybrid models
The KelpDAO exploit and subsequent Aave bad debt are intensifying scrutiny of DeFi lending architecture. Egorov argued that design choices around risk segmentation now directly shape network resilience and asset safety.
For market participants, the episode is shifting attention from headline yields to underlying structure. Those allocating capital are being pushed to identify which assets sit in the same risk pool, and how failures in one market could transmit to others.
A conservative stance, he suggested, would involve reviewing exposure to protocols that mix complex or speculative instruments, such as liquid restaking tokens, with blue-chip collateral in a single shared pool. Reducing exposure to such blended markets could lower the chance of being caught in cross-asset contagion.
Platform design moves into focus
Aave’s version 4 “hub-and-spoke” model, scheduled for rollout on Ethereum, is being viewed in the market as a direct response to current structural weaknesses. The design aims to maintain the efficiency of shared liquidity while building in semi-isolation between market segments.
If the model works as intended, it could demonstrate that DeFi platforms do not have to choose strictly between scale and safety. Semi-isolated architectures may allow protocols to keep deep, flexible liquidity while limiting the blast radius of any single asset failure.
With total value in lending protocols still rising and regulatory scrutiny increasing, Egorov’s comments highlight a growing consensus: future competition in DeFi is likely to center less on raw yield and more on how well platforms can segment and contain risk across their markets.
Future directions for defi lending
Concerned about DeFi risk and non-isolated lending? Learn core concepts in our guide on what DeFi is and how it works.
Disclaimer: The content on this page is provided for general informational purposes only and does not represent the views or financial advice of Toobit. We make no guarantees regarding the accuracy or completeness of this information and shall not be held liable for any errors, omissions, or outcomes resulting from its use. Investing in digital assets involves risk; users should independently evaluate their financial situation and the risks involved. For further details, please consult our Terms of Service and Risk Disclosure.
