DeFi outflows, legal pressure

Decentralized finance lost about $14 billion in locked funds within days of the KelpDAO hack, as New York opened a second front with lawsuits against Coinbase and Gemini. (coindesk.com) (ag.ny.gov) The KelpDAO exploit hit on April 18 and drained about $290 million to $292 million, according to LayerZero and multiple market reports. LayerZero said the breach was tied to KelpDAO’s rsETH setup and a “single-DVN” configuration, a message-routing design used to move assets across chains. (layerzero.network) (finance.yahoo.com) By April 20, CoinDesk reported DeFi had shed roughly $14 billion in total value locked, a common measure of how much crypto users have deposited into lending, trading, and staking protocols. Aave took some of the biggest withdrawals, with one report putting its deposits at $30.7 billion, down from $48.5 billion before the April 18 breach. (coindesk.com) (msn.com) A bridge hack can spread beyond one project because bridges act like transfer stations between blockchains: if the accounting breaks, users start pulling funds from other protocols that hold the same assets or depend on the same plumbing. That is what happened here, with rsETH exposure and broader fears about collateral quality pushing money out of lending markets. (layerzero.network) (financemagnates.com) New York Attorney General Letitia James filed suit on April 21 against Coinbase Financial Markets and Gemini Titan, saying their prediction-market products amounted to illegal, unlicensed gambling under state law. Her office said the platforms let New Yorkers wager on sports, elections, and entertainment events and asked the court to stop the businesses in the state. (ag.ny.gov) (ocregister.com) The cases add legal pressure at the same moment crypto traders are already reacting to security risk. One side of the market is dealing with stolen collateral and emergency freezes; the other is dealing with whether products sold as financial contracts will be treated by states as bets. (ag.ny.gov) (finance.yahoo.com) Arbitrum’s Security Council said it froze about $100 million in Ether tied to the KelpDAO exploit, showing that some supposedly decentralized systems still rely on emergency human intervention after a breach. LayerZero said preliminary indicators pointed to a “highly-sophisticated state actor,” likely North Korea’s Lazarus Group, though attribution in crypto investigations can change as evidence develops. (finance.yahoo.com) (layerzero.network) Coinbase and Gemini have not accepted New York’s characterization of prediction markets as illegal gambling in the state’s filing, and the legal fight is likely to turn on how courts classify event contracts sold through crypto platforms. For now, the market reaction is simpler: less money is staying in DeFi, and more of crypto’s biggest firms are back in court. (ag.ny.gov) (cbsnews.com)