As of last Friday, April 17, the annual interest rate for borrowing stablecoins on Aave, widely considered the gold standard in DeFi, was 2.32%. The Federal Reserve’s overnight interest rate is 3.64%. On the face of it, the market is pricing unregulated open source smart contracts as a lower credit risk than the U.S. Treasury.
After 48 hours, it was over. The market did something in real time that regulators, auditors or commentators could not: it repriced DeFi credit risk.
Pricing error
Ranking U.S. dollar credit options by their yields before the end of last week makes no sense. Treasury overnight interest rate: 3.64%. Ledn’s investment-grade Bitcoin-backed ABS premium segment was priced at BBB-: 6.84% in February. The strategy’s STRC sustainable top choice: 11.50%. US credit cards: 21%, default rate 4%. Aave, on the other hand, is well below all of these: 2.32%.
Something has to give. Luca Prosperi said earlier this year that DeFi stablecoin interest rates should be 250-400 basis points higher than the risk-free rate, or 6.15-7.76%. The Bank of Canada’s April 2 report took the opposite view, citing Aave’s 0.00% non-performing loan ratio as evidence that the DeFi architecture provides default-free loans through strict collateral requirements and price-based execution. So what does this all mean? Either DeFi solves credit risk, or the market has stopped pricing it.
Only one side can be true. Last weekend, we found out.
1/1 Question
On April 18, attackers exploited Kelp DAO’s LayerZero-backed cross-chain bridge to mint approximately 116,500 unbacked rsETH tokens—approximately 18% of circulating supply and worth approximately $292 million. Synthetic tokens are transferred to Aave as collateral. The attackers borrowed an estimated $190-230 million in physical assets against collateral that did not exist when it mattered. Aave’s incident report acknowledged that the protocol worked as designed; the shortage was structural, not technical. Kelp and LayerZero have since publicly blamed each other’s 1/1 validator configuration for making exploits trivial.
Contagion is instant. DeFi protocols are interoperable by design, and “looping”—borrowing on one platform and redepositing the proceeds as collateral into another—means a blow to Aave is a blow to everything built on top of Aave. Approximately 20% of Aave’s historical borrowing volume comes from recursive leverage. Within 48 hours, Aave had a net outflow of US$6-10 billion. The WETH, USDT and USDC pools have reached 100% utilization. Depositors cannot withdraw money. Borrowers do not have access to stablecoin liquidity. Troubled users borrowed another $300 million at a 75% loan-to-value (LTV) ratio, often at a loss, just to get cash, using their locked-up stablecoin deposits as collateral.
Prices have responded accordingly. Aave stablecoin deposit APY rose to 13.4% in two days from 3-6% before utilization. As the scramble for liquidity spread outward, Morpho’s USDC vault backed Coinbase’s consumer loan product, with annual interest rates jumping from 4.4% on April 18 to 10.81% the next day. The total DeFi TVL on the top 20 chains fell by more than $13 billion.
No bankruptcy, no courts, no recourse
This is the part that doesn’t make the headlines and is the part that allocators need to understand.
There are no bankruptcy laws within DeFi protocols. If you exit first, you keep everything. If you’re the last one, you won’t – and you could be left with a disproportionate share of the damage. Regulated lenders have a legal obligation to cease operations when they realize they cannot meet their debts, and bankruptcy courts can recover from parties who unfairly benefited. The bankruptcy process for Celsius, BlockFi and FTX was difficult, but creditors recovered assets and those responsible faced judges.
In DeFi, there is no process. There is no court. No recovery. No one was held accountable.
This has direct implications for risk assessment. If you can estimate the total loss but cannot predict how it will be distributed, then you cannot estimate your risk exposure. It may be zero. It could be everything. It depends on how fast you are moving and how fast the person next to you is moving.
what happens next
DeFi isn’t going away. The architecture has real utility and permissionless markets are here to stay – across every asset class and every era. But they are never risk-free, and they always carry a premium over their regulated counterparts. The market was reminded 48 hours after the April 17 event that the same rules apply on-chain.
Institutional allocators adjusting their DeFi exposure for the coming year should take this signal seriously. The Aave APR of 2.32% before the end of last week did not reflect the potential risks, and the market has now adjusted. DeFi interest rate settlement from here will be determined by the market. But the mispricing is over. This past weekend proved that.