Mantle said on April 21 that its blockchain, bridges, and core infrastructure remain fully operational and secure, distancing its own systems from a major exploit linked to KelpDAO’s rsETH configuration.
The company is coordinating with Aave and other affected protocols on a joint recovery plan that could include the use of Mantle’s treasury to stabilize activity across the broader ecosystem.
No impact on Mantle contracts or assets
Technical reviews concluded that Mantle’s chain, native bridges, and on-chain assets were not directly impacted by the vulnerability.
The issue was limited to KelpDAO’s rsETH protocol, which used a cross-chain bridge relying on LayerZero’s infrastructure. Mantle said the attacker did not interact with any Mantle contracts or markets.
Temporary liquidity disturbances seen in parts of the Mantle ecosystem were described as secondary effects from the external incident rather than a failure of Mantle’s own systems.
Mantle’s precautionary risk controls remain in place and will be adjusted in coordination with partners as market conditions normalize.
Coordinated recovery with Aave and partners
Mantle confirmed it is working with Aave and other ecosystem participants to synchronize recovery steps and restore balanced market activity. Key elements of the plan include:
- alignment of technical recovery mechanisms
- targeted liquidity restoration
- evaluation of potential treasury support to backstop affected markets and reinforce network resilience
The possible use of treasury funds is aimed at ring-fencing the broader Mantle and DeFi ecosystem from the consequences of KelpDAO’s specific operational failure. The intent is to help make depositors on interconnected platforms, including Aave, whole and reduce the risk of a wider loss of confidence.
On-chain signs of stabilization
On-chain data shows that roughly USD 204 million in core assets have been repaid over the past 48 hours. Mantle said this marks a steady return of capital and an improvement in liquidity conditions, with network operations continuing without disruption.
Despite these signs of stabilization, market-wide sentiment remains fragile. Data from DefiLlama shows Mantle’s total value locked (TVL) has fallen 52.01% over the past 30 days, reflecting a broader repricing of risk as traders reassess exposure to cross-chain infrastructure and leveraged DeFi strategies.
How the exploit unfolded
The incident was not caused by a breach of Mantle’s security stack. Instead, it originated from a vulnerability in the configuration of KelpDAO’s cross-chain bridge, which depended on LayerZero’s messaging and bridging infrastructure.
An attacker exploited this weakness to mint about 116,500 rsETH without backing, worth around USD 292 million at the time. These unbacked rsETH tokens were then deposited as collateral into Aave, where the attacker borrowed legitimate assets against them.
This left Aave with substantial bad debt. Estimates from Aave Labs and LlamaRisk put potential losses between USD 123 million and USD 230 million, depending on how the final shortfall is distributed across users and markets.
Liquidity crunch at Aave and DeFi spillover
The exploit triggered a sharp liquidity crunch at Aave. Alarmed users rushed to pull funds, driving an estimated USD 6 billion in withdrawals. Utilization rates for some assets spiked to 100%, and Aave temporarily froze certain withdrawals to manage the stress.
The shock rippled across the decentralized finance sector, contributing to a market-wide drop in total value locked as capital rotated out of perceived higher-risk protocols. Mantle’s ecosystem, with its exposure to liquid restaking and cross-chain activity, was among those hit hardest by sentiment shifts.
Risks of liquid restaking and cross-chain bridges
The episode has sharpened scrutiny on liquid restaking tokens and the infrastructure that supports them. The failure point in this case was not the restaking concept itself, but the bridge used to move the token between networks.
The incident underscores that complex, layered DeFi structures are only as secure as their weakest component. Bridge architectures, oracle setups, and protocol integrations can all become single points of failure.
Traders allocating capital into yield-bearing restaking and cross-chain strategies now face a clearer trade-off:
- higher returns from leverage and composability
- versus increased architectural risk that can lead to sudden, cascading losses when one layer breaks
Risk frameworks are likely to be updated to account more explicitly for bridge design, governance, and incident response capabilities.
Mantle’s positioning and next steps
Mantle operates as a distribution layer connecting traditional finance to blockchain-based liquidity. It manages over USD 4 billion in community-owned assets and is backed by the MNT token and affiliated projects including mETH, fBTC, and MI4. The ecosystem is designed to support large-scale adoption via institutional-grade infrastructure.
Mantle said it remains engaged with ecosystem partners, builders, and liquidity providers to maintain resilience and support long-term operational growth. Further updates are expected as the coordinated recovery with Aave and other protocols progresses and decisions around treasury deployment are finalized.
To navigate risks like protocol exploits, learn how crypto risk management strategies can protect your portfolio and improve your long-term trading decisions.
Disclaimer: The content on this page is provided for general informational purposes only and does not represent the views or financial advice of Toobit. We make no guarantees regarding the accuracy or completeness of this information and shall not be held liable for any errors, omissions, or outcomes resulting from its use. Investing in digital assets involves risk; users should independently evaluate their financial situation and the risks involved. For further details, please consult our Terms of Service and Risk Disclosure.

