DeFi Leverage Risks Mount After $13 Billion Exploit Wave

The April exploit wave, which saw a record-breaking 28 individual hack events, pushed DeFi’s total value locked down 10.7% to $82.7 billion. While market participants might expect a corresponding reduction in risk, Binance Research reports that meaningful deleveraging has yet to materialize. Instead, the leverage ratio has climbed to approximately 38% simply because the pool of collateral shrank faster than the outstanding debt, making every remaining dollar of credit weigh more heavily on the system.

The damage was concentrated in a few high-profile incidents, most notably the attacks on Drift Protocol and KelpDAO. These two events alone accounted for $577 million in losses and have been linked to the Lazarus Group. The KelpDAO breach proved particularly systemic, forcing $230 million in bad debt onto Aave and slashing the lending giant's liquidity by half. These incidents highlighted that modern DeFi threats extend far beyond simple smart contract bugs, often involving social engineering, governance manipulation, and bridge infrastructure failures.

Although total losses dropped significantly in May—with CertiK estimating $68.3 million in damages—the underlying structural risks persist. Recent attacks on Humanity Protocol, Aztec, and Raydium demonstrate that legacy contracts and compromised administrative keys remain active vulnerabilities. With borrowing demand stagnant and liquidity weakened, the sector remains in a precarious state where the lack of genuine deleveraging leaves protocols exposed to further volatility.