Unchained Daily
Posts
The Kelp DAO Exploit Bill Is Coming Due

The Kelp DAO Exploit Bill Is Coming Due

Plus: ⚔️ Kelp and LayerZero go to war over who's to blame | 🔒 Arbitrum freezes $71M of the stolen haul | 🔬 Ripple maps its path to quantum-proof XRP

David Okoya
April 21, 2026

Hi! In today’s edition:

• 🔥 Aave faces up to $230M in bad debt from the Kelp DAO rsETH exploit

• ⚔️ Kelp DAO blames LayerZero's for the $290M hack

• 🔒 Arbitrum's Security Council froze $71M in stolen ETH from the Kelp DAO exxploit

• 🔬 Ripple published a four-phase roadmap to make the XRP Ledger quantum-resistant by 2028

Today’s newsletter is brought to you by Nexo!

Unlock Exclusive Rates with Nexo

Rates, product availability, features, and applicable terms may vary based on jurisdiction, eligibility, loyalty tier, and other factors, and are subject to change at any time.

Nexo is a premier digital wealth platform offering:

crypto yield up to 15% (based on stated annual interest rates)
crypto-backed credit lines from 1.9%
a wide range of digital assets.

Join today and get 30-day access to exclusive rates.

Aave Faces Up to $230 Million in Losses After Kelp DAO Exploit

A new incident report from Aave Labs and risk firm LlamaRisk puts the protocol's potential bad debt from the Kelp DAO exploit at between $124 million and $230 million, depending on how Kelp allocates the shortfall.

The attacker deposited 89,567 unbacked rsETH into Aave as collateral and borrowed roughly $190 million in ETH and related assets before markets were frozen, according to the report.

If losses are spread across all rsETH holders, the token would face an estimated 15% depeg, leaving Aave with about $124 million in bad debt. If losses are isolated to layer 2 networks, the damage rises to $230 million, concentrated on Arbitrum and Mantle.

The Aave DAO treasury holds $181 million in assets as of April 20, including $52 million in stablecoins, giving it limited runway to absorb a worst-case scenario without drawing on stkAAVE stakers.

Kelp DAO Pushes the Blame for the $290 Million Exploit Back to LayerZero

Kelp DAO is pushing back on LayerZero's post-mortem, which blamed the protocol for using a risky 1-of-1 verifier configuration against explicit guidance. Kelp says the setup was not a rogue choice, but LayerZero's own documented default, and that the compromised verifier was LayerZero's own infrastructure, not a third-party one Kelp independently chose.

Yearn Finance developer Artem K, known as @banteg, published a technical review supporting Kelp's position, finding that LayerZero's V2 OApp Quickstart ships with single-source verification defaults across every major chain. A communications channel between the two teams had been open since January 2024, and Kelp says LayerZero never issued a specific recommendation to change the rsETH DVN configuration. LayerZero has not publicly responded to Kelp's rebuttal.

Arbitrum Freezes $71 Million in ETH Stolen in Kelp DAO Exploit

The Arbitrum Security Council took emergency action on April 20, freezing 30,766 ETH worth roughly $71 million linked to the Kelp DAO exploit and moving the funds to a governance-controlled wallet inaccessible to the original holder. The council said it acted with input from law enforcement regarding the exploiter's identity and conducted technical diligence to ensure no other Arbitrum users or applications were affected.

The freeze recovers about a quarter of the $292 million stolen on April 18 and can only be unwound through further Arbitrum governance action. Nine of the council's 12 members voted to execute the emergency measure, with council member Griff Green saying the decision came after "countless hours of debates, technical, practical, ethical and political."

While the move potentially provides some relief for those affected by the Kelp DAO exploit, it also reignites a long-running tension in crypto between security and the principle of permissionless transactions.

Ripple Wants the XRP Ledger Quantum-Proof by 2028

Ripple published a four-phase roadmap on April 20 to make the XRP Ledger resistant to quantum computing attacks by 2028, responding to recent Google Quantum AI research showing that classical blockchain cryptography may be vulnerable sooner than previously estimated. The plan includes a Quantum-Day contingency that would disable classical public-key access and enable fund migration via zero-knowledge proofs if threats arrive before the full transition completes.

Phases two through four, running through 2026 and into 2028, involve testing NIST-recommended post-quantum cryptographic schemes under real XRP Ledger workloads, running hybrid elliptic-curve and post-quantum signatures on Devnet, and ultimately proposing a new network amendment for native post-quantum cryptography. Ripple is working with Project Eleven on validator testing and early custody prototypes. The company argued XRPL has a head start over competitors like Ethereum because its protocol-native key rotation allows users to migrate away from vulnerable keys without abandoning their accounts.

DEX in the City Today on Kelp’s $292M Hack, Kalshi’s Grilling, Circle’s Freeze Suit

The DEX in the City crew breaks down the $292M KelpDAO exploit and the LayerZero-Kelp blame fight, DPRK’s $575 million in DeFi exploits in 18 days, Circle’s new class-action exposure for failing to freeze stolen Drift USDC, the 9th Circuit’s “sophistry to the nth degree” grilling of Kalshi, and why Amex is volunteering to eat erroneous-agent liability.

Streams today at 12pm ET.

Join us on X, YouTube or PumpFun.

📈 Strategy acquired 34,164 BTC for approximately $2.54 billion at an average of $74,395 per coin between April 13 and April 19, its largest single-week purchase since November 2024. Total holdings now stand at 815,061 BTC, surpassing BlackRock's iShares Bitcoin ETF for the first time.
📊 Global crypto investment products pulled in $1.4 billion last week, the strongest weekly total since January and a third consecutive week of positive flows, per CoinShares. Bitcoin-focused funds led with $1.12 billion, while Ethereum products added $328 million.
📈 Bitmine bought 101,627 ETH worth over $230 million last week, its biggest weekly haul since December and its largest of 2026. The purchase brings total holdings to 4.97 million ETH, with chairman Tom Lee saying the firm sees signs the crypto "mini-winter" is ending.
🤫 Coinbase is in early talks with Bybit to tokenize, custody and distribute US public and pre-IPO stocks globally, CoinDesk reports citing a source directly involved in the discussions. The arrangement does not involve any equity stake and is separate from Bybit's plans to enter the US market through an unidentified local partner.
📊 Grayscale amended its Hyperliquid ETF filing to replace Coinbase with Anchorage Digital Bank as custodian, a notable departure given that Coinbase holds custody for almost every US-listed spot Bitcoin ETF. Analysts cite the competitive conflict between Coinbase and Hyperliquid's derivatives platform as a likely driver.
🏦 Coinbase launched crypto-backed loans for UK users, letting customers borrow USDC against Bitcoin and Ethereum holdings via Morpho on Base. The product makes Coinbase the first major exchange to bring on-chain collateralized lending directly to British retail users.
🤖 Coinbase-incubated x402 protocol unveiled an app store for AI bots, letting developers publish and monetize services that autonomous agents can discover and pay for using crypto. The launch builds on x402's existing infrastructure, which has processed more than 50 million machine-to-machine transactions since February.
⚖️ BIS General Manager Pablo Hernandez de Cos urged global cooperation on stablecoin regulation, warning that divergent frameworks could lead to "severe market fragmentation" and regulatory arbitrage. He also said Tether and Circle currently exhibit features resembling securities more than money, citing redemption frictions that push prices off their $1 peg.
🏦 Former Goldman Sachs quantitative MD joined DRW from crypto investment firm XBTO, continuing a pattern of senior TradFi talent rotating through crypto shops before landing at the broader alternative-asset industry.

🇯🇵 Japan's JSCC launched a proof-of-concept trial with Mizuho, Nomura, and Digital Asset to test Japanese government bonds as digital collateral on the Canton Network. The pilot, selected for support under Japan's Financial Services Agency Payment Innovation Project, will examine whether JGBs can be transferred and managed on-chain around the clock while preserving their legal status under Japanese securities law.
🇰🇷 South Korea's incoming Bank of Korea governor Shin Hyun-song vowed to expand CBDC and deposit token infrastructure, positioning them as the core of the country's digital money system with stablecoins playing a supplementary role. He left open a future role for won-denominated stablecoins but said issuance should begin with regulated banks to meet AML and compliance requirements.

💰 Tether disclosed a 1.95 million-share stake in Antalpha, the Bitmain-linked bitcoin mining finance firm, representing 8.2% of the company's equity after buying more than half of its May 2025 Nasdaq IPO. Antalpha reported $79.7 million in 2025 revenue, up 68% year over year, though shares have fallen more than 27% from their $12.80 IPO price.
💰 Tether joined an $8 million strategic funding round in Abu Dhabi tokenization firm KAIO, which packages institutional funds from BlackRock, Brevan Howard, and Hamilton Lane for on-chain distribution with minimum tickets starting at $100. KAIO plans to launch an on-chain fund with Mubadala Capital and channel USDT liquidity into regulated UAE investment products.
💸 Bybit led an $8 million Series A in Hata, Malaysia's only dual-licensed digital asset exchange, building on its earlier seed investment. Hata has over 209,000 users and processed roughly $225 million in transaction volume in 2025.

Enter Bitcoin Capital Markets