$292M Kelp DAO Hack Exposes Critical DeFi Security Gaps as Wall Street Moves Onchain

A $292 million exploit of Kelp DAO has forced the cryptocurrency industry to confront fundamental security vulnerabilities in decentralized finance, even as traditional financial institutions accelerate their move into onchain markets. Industry insiders say the incident serves as a critical wake-up call rather than a barrier to institutional adoption of DeFi.

In the weeks preceding the exploit, major Wall Street players, including Apollo Global Management, which oversees $900 billion in assets, partnered with Morpho to support lending markets. Simultaneously, BlackRock, the world’s largest asset manager, deployed its tokenized money market fund onto decentralized exchange Uniswap.

Despite the substantial losses from the Kelp DAO exploit, industry experts argue that traditional finance’s entry into on-chain markets will continue. However, the incident has exposed how much work remains before larger capital pools can safely scale into decentralized finance protocols.

See also: Kelp DAO Blames LayerZero Default Settings for $290 Million Bridge Exploit

Nick Cherney, head of innovation at Janus Henderson, an asset manager overseeing approximately $500 billion, characterized the hack as temporary friction rather than permanent damage. “DeFi platforms are pioneering new ways for investors to utilize their capital more efficiently,” Cherney said, noting that pioneers inevitably face risks in emerging sectors.

Cherney emphasized that failures like the Kelp DAO exploit force systemic improvements. “This is a speed bump for sure, but not a roadblock,” he stated. He pointed to the growing integration of tokenized real-world assets (including funds, bonds, and credit) as anchoring DeFi markets with legal frameworks and risk controls refined over decades in traditional finance.

Security specialists have drawn more urgent conclusions from the incident. Paul Vijender, head of security at Gauntlet, stressed that current DeFi security protocols remain insufficient for institutional-scale operations. “DeFi and onchain asset management operate in a highly adversarial environment,” Vijender explained. “Systems are only as secure as their weakest links.”

The industry is shifting toward zero-trust architectures, where no component of a system is assumed inherently safe. This approach requires layered protections including continuous monitoring, stricter controls, and built-in redundancies that eliminate reliance on single safeguards.

Evgeny Gokhberg, founder of digital asset manager Re7 Capital, called for the elevation of industry best practices to baseline requirements. These essential protections include timelocks on critical governance actions, stricter multi-signature controls, tighter collateral standards, and enhanced safeguards around bridges identified as one of DeFi’s most common failure points.

“The industry needs to treat them as baseline requirements, not best practice,” Gokhberg said.

Bhaji Illuminati, CEO of Centrifuge Labs, characterized the current moment as a compression of financial evolution. “TradFi has had decades to build up layers of protections,” she said. “DeFi is doing that too, but on a vastly accelerated timeline.”

For institutions to allocate capital at scale into DeFi, Illuminati outlined three critical conditions. First, clarity must exist regarding asset ownership, with verifiable collateral and legal structures mapping to real-world risk. Second, reliability requires smart contracts, oracles, and governance processes to function in predictable, auditable ways.

Third, liquidity must remain stable during market stress, enabling capital to move without distorting markets. “Being open and secure is not mutually exclusive,” Illuminati said. “The goal is to make trust explicit and verifiable.”

Illuminati emphasized that every component of the DeFi infrastructure stack must prioritize security. “Going forward, every layer of the DeFi stack needs to make security its number one priority,” she stated, noting this becomes increasingly critical as artificial intelligence integrates deeper into cryptocurrency systems.

The tokenized real-world asset market has experienced substantial growth, expanding sixfold since 2025, suggesting that institutional capital continues flowing into onchain markets despite security incidents. Industry observers expect the Kelp DAO exploit to accelerate the transition toward more robust security frameworks rather than slow institutional participation in decentralized finance.