Kelp DAO Exploit Spurs DeFi Shift to Chainlink, $290M at Stake

Tony Kim May 08, 2026 14:16

DeFi protocols like Solv and Tydro migrate to Chainlink after Kelp DAO's $290M hack exposed security flaws in oracle and bridge infrastructure.

The $293 million exploit of Kelp DAO has set off a wave of security overhauls across decentralized finance (DeFi) protocols, with several projects abandoning current oracle and bridge providers in favor of Chainlink’s infrastructure. The attack, which occurred on April 18, exploited vulnerabilities in Kelp DAO’s cross-chain setup, draining 116,500 rsETH tokens and triggering widespread disruption in the DeFi ecosystem.

Solv Protocol, a Bitcoin DeFi platform, announced on May 7 that it will migrate to Chainlink's Cross-Chain Interoperability Protocol (CCIP), citing an "extensive security review" that labeled Chainlink as the most secure option. Similarly, on May 6, liquidity protocol Tydro disclosed its own shift to Chainlink after its previous oracle provider, Chaos Labs, suffered an incident that led to market suspensions due to inaccurate price feeds.

The systemic fallout from the Kelp DAO exploit has been severe. Not only did the attack cause a $10.5 billion drop in DeFi total value locked (TVL), but it also forced major protocols like Aave to suspend markets involving rsETH. Compounding the crisis, Kelp DAO itself pivoted to Chainlink and abandoned its LayerZero-powered bridge, blaming the vulnerability on LayerZero’s single-verifier setup. In response, LayerZero argued on April 20 that Kelp DAO ignored prior warnings about the risks of relying on a single verification path.

Chainlink Consolidates as Leading Oracle Provider

The migration of multiple DeFi protocols to Chainlink underscores a broader trend: the consolidation of trusted oracle providers. Chainlink currently secures over $32 billion in value, representing 58% of the oracle market, according to DefiLlama. This dominance has grown as protocols prioritize reliability amid a spate of high-profile exploits across the sector. Other providers, including Chronicle ($7.6 billion in value secured) and RedStone, are also emerging as critical players, albeit with significantly smaller market shares.

Speaking to Cointelegraph, Marcin Kazmierczak, co-founder of RedStone, noted, "A smaller set of trusted oracles is forming in the market. As capital concentrates around providers with proven track records, the risk of oracle-related exploits could decline." However, Nik Kunkel, founder of Chronicle, cautioned that overreliance on a single provider introduces systemic risk, emphasizing the need for transparent and independently verifiable data infrastructure.

Market Impact and Future Considerations

For traders and investors, the fallout from the Kelp DAO hack serves as a stark reminder of the risks posed by weak cross-chain and oracle infrastructure. The event has already led to a partial freeze of $71 million in Ether tied to the exploit, with an Arbitrum DAO proposal to release these funds nearing passage as of May 8. If approved, this could help restore some of rsETH’s value, potentially stabilizing related DeFi markets.

Looking ahead, the shift to Chainlink and other robust providers may bolster confidence in DeFi, but it also raises questions about market concentration. As protocols increasingly consolidate around a few dominant players, the sector will need to balance enhanced security with the risk of centralization.

• defi
• chainlink
• kelp dao
• oracles
• layerzero