Kelp suffered a $293M exploit exposing vulnerabilities in AI agent collateral management; Bittensor launches Conviction Mechanism.
Security & Exploits ·
Kelp DAO suffered a $293M exploit through vulnerabilities in its cross-chain bridge, with attackers minting 116,500 unbacked rsETH tokens and depositing them as collateral on Aave V3 to borrow approximately $196M in WETH before Kelp froze its contracts 46 minutes later. The incident triggered an Aave TVL decline from $26.4B to roughly $20B and an 18% drop in AAVE token price, marking the largest DeFi exploit of 2026. Aave's own contracts remained uncompromised; the attack exploited external collateral that risk parameters had accepted.
The breach exposed a critical gap in how AI agents validate on-chain state. Agents typically rely on blockchain data to assess collateral backing, but rsETH appeared fully backed when it was not, meaning even properly coded agents could incur losses if accepting fraudulent collateral. Current agentic payment protocols lack tooling to verify collateral integrity beyond payment settlement mechanisms.
The April 2026 exploit landscape totaled over $575M in losses. What remains unclear is whether existing risk management frameworks will integrate collateral verification as a standard requirement, or how quickly AI agents can be retrofitted with independent backing validation before similar cross-chain vulnerabilities are exploited further.