DeFi RWA Markets Recover to $3.77B After KelpDAO Exploit

95-day recovery milestone reached as tokenized asset ecosystem stabilizes

DeFi’s active tokenized real-world asset (RWA) total value locked recovered to approximately $3.77 billion as of July 22, nearly 95 days after the April 18 KelpDAO exploit triggered a $13 billion decline across lending markets.

The KelpDAO incident centered on a compromised verification setup that allowed attackers to forge a cross-chain message and release 116,500 unbacked rsETH tokens, worth $292 million, through LayerZero infrastructure. Aave accepted rsETH as collateral, enabling the attacker to borrow against forged tokens and triggering a broader run that spread to lending markets without direct rsETH exposure. Within two days, $8.45 billion was withdrawn from Aave alone.

The recovery reflects stabilization across multiple chains. Ethereum hosts $1.98 billion in active RWA, representing 53% of the $3.77 billion total. Solana follows with $464 million, Monad with $337 million, Avalanche with $261 million, and Plasma with $211 million.

Private credit dominates tokenized RWA allocation

Private credit represents the largest active RWA category. Maple credit tokens account for $1.3 billion across all chains, while Janus Henderson’s JAAA CLO exposure totals $412 million. Reinsurance tokens (ONyc and reUSD combined) represent $330 million, gold-backed XAUT accounts for $235 million, USTB holds $137 million in active value, and WTGXX represents $67 million.

In April, before the exploit, credit assets comprised 17% of tokenized RWA value but represented 80% of DeFi deposits from the RWA category, signaling concentration in lending applications. The $3.77 billion in active DeFi use represents 7% of the $51.9 billion total tokenized RWA value tracked across all blockchain networks by DefiLlama.

Infrastructure and governance responses

LayerZero committed to no longer serving as the sole required attestor on any channel following the exploit. Aave’s governance coordinated a market-wide restoration of rsETH backing and covered bad debt resulting from the incident.

Tokenized RWA assets now function across multiple roles in DeFi infrastructure: as collateral in lending protocols like Morpho, as inputs to vault strategies through Kamino, and as cross-chain working capital deployed through platforms including Grove Finance. The 95-day recovery timeline marks a stabilization point after the initial shock, though the ecosystem’s reliance on private credit as a dominant asset class underscores concentration risk in the active RWA subset.