Kelp DAO's $292M exploit exposes DeFi's bridge vulnerabilities as Arbitrum freezes funds

The Kelp DAO exploit has become 2026's largest DeFi hack, with $292 million stolen through a sophisticated attack on LayerZero's bridge infrastructure. [LayerZero](https://t.me/shoalresearch/13940) attributes the attack to North Korea's Lazarus Group, claiming hackers poisoned downstream RPC infrastructure used by their DVN (Data Verification Network). However, [Kelp DAO has shifted blame back to LayerZero](https://www.theblock.co/post/398204/kelp-dao-shifts-blame-layerzero), arguing the vulnerable 1-of-1 DVN setup was LayerZero's default configuration. The attack's impact extends far beyond Kelp itself. [link">Aave froze rsETH markets](https://t.me/shoalresearch/13954) across V3 and V4 to prevent further contagion, while [DeFi TVL dropped $13 billion in two days](https://t.me/alearesearch/1436) as investors fled amid contagion fears. Aave alone lost $8.45 billion in deposits over 48 hours. A [Dune analysis reveals](https://t.me/shoalresearch/13944) that 47% of LayerZero's ~2,665 unique OApp contracts run the same vulnerable 1-of-1 DVN security model that enabled the Kelp attack. Arbitrum's Security Council took unprecedented action by [freezing 30,766 ETH ($71 million)](https://t.me/shoalresearch/13956) connected to the exploiter after consulting with law enforcement. However, [the exploiter has already begun moving funds across chains](https://www.theblock.co/post/398239/kelp-dao-exploiter-begins-moving-stolen-funds-across-chains-after-arbitrum-eth-freeze), demonstrating the limitations of centralized intervention. This has sparked debate about decentralization trade-offs, as critics question whether such freezing powers align with crypto's permissionless ethos.

AI agents are rapidly evolving from experimental toys to real businesses with legal structures and revenue streams. [Austen Allred's Kelly Claude](https://www.youtube.com/watch?v=8xHc_fFSMd0) represents a breakthrough: an AI agent with its own LLC, bank accounts, token, and even a human employee. Kelly autonomously finds software opportunities, ships apps to the App Store, and generates revenue through what Allred calls "orchestration and factory-style workflows." The intersection of AI and crypto is gaining institutional momentum. [Coinbase-incubated x402 protocol launched](https://www.theblock.co/post/398123/coinbase-incubated-x402-protocol-unveils-app-store-for-ai-bots) an app store for AI bots, creating a marketplace where agents can discover and pay for services on-chain. The platform, branded as [Agentic.Market](https://t.me/shoalresearch/13942), positions itself as "the homepage of the agent economy" and enables both humans and agents to monitor agentic commerce trends. [A16z Crypto identifies five key ways](https://t.me/shoalresearch/13939) blockchains can support AI agents: identity for non-humans, governance for AI-run systems, payment infrastructure for AI-native businesses, repricing trust in an agentic economy, and preserving user control. This framework suggests crypto rails may become essential infrastructure as AI agents transition from experimental projects to legitimate economic actors requiring identity, payment processing, and governance mechanisms.

Regulatory frameworks for digital assets are rapidly advancing across major jurisdictions. [The UK's HM Treasury proposed unifying payment rules](https://www.theblock.co/post/398244/uk-sets-out-plan-to-integrate-payments-rules-covering-stablecoins-and-tokenized-deposits) for traditional services, stablecoins, and tokenized deposits during Fintech Week in London. This integrated approach signals the UK's intent to create comprehensive digital asset infrastructure rather than piecemeal regulation. [South Korea's new Bank of Korea governor](https://www.theblock.co/post/398223/bank-of-korea-new-chief-cbdc-deposit-tokens) pledged to advance CBDCs and deposit tokens while notably excluding stablecoins from his agenda. Governor Shin Hyun-song's previous BIS tenure included negative stablecoin positions, suggesting South Korea may pursue state-controlled digital currency solutions over private alternatives. [Japan is testing blockchain infrastructure](https://www.theblock.co/post/398228/japan-jscc-tests-blockchain-government-bonds) for government bonds through a proof-of-concept trial with Mizuho and Nomura on the Canton Network. This initiative demonstrates traditional financial institutions' growing comfort with blockchain settlement infrastructure for sovereign debt instruments. US crypto legislation faces delays as [Senate crypto bills encounter April setbacks](https://www.theblock.co/post/398197/senate-crypto-bill-faces-april-setback) amid building pressure for hearings on market structure legislation. The timing pressure suggests legislative action may push to May, creating uncertainty for digital asset regulatory clarity.

link">Ethereum's positioning as "productive money" is gaining traction among institutional observers, despite ETH's -2.80% 7-day performance compared to Bitcoin's +2.16% gain. [Michael McGuiness and Vivek Raman present a $250,000 ETH thesis](https://www.youtube.com/watch?v=cwBtPPL_4Oc) on Bankless, arguing Ethereum combines gold and Bitcoin's store-of-value properties with the ability to compound through network activity. Their framework positions ETH as the settlement layer for a tokenized economy, potentially unlocking massive monetary premium beyond traditional DCF models. The "productive money" concept suggests ETH's yield-generating capabilities through staking and network fees differentiate it from purely monetary assets like Bitcoin. [Tom Lee declared "crypto winter is much closer to ending"](https://www.theblock.co/post/398096/tom-lee-says-crypto-winter-is-much-closer-to-ending-as-bitmine-buys-another-101627-eth) as institutional ETH accumulation accelerates. Bitmine purchased 101,627 ETH in a single week, pushing its treasury to 4.12% of ether's total supply - a significant concentration that underscores institutional conviction despite recent price weakness. The Ethereum ecosystem faces headwinds from the Kelp DAO exploit's broader impact on DeFi confidence, but the underlying infrastructure thesis around tokenization and settlement utility remains intact among long-term institutional buyers.

Institutional crypto investment flows are showing renewed strength despite recent DeFi turbulence. [Crypto funds recorded $1.1 billion in weekly inflows](https://insights.unlocks.app/weekly-unlock-digest-apr-20-26-2026-crypto-rides-the-iran-peace-rally/), the strongest since January, driven largely by US demand. The surge coincided with geopolitical developments as Iran's Foreign Minister confirmed the Strait of Hormuz remains "completely open" for commercial shipping, alleviating energy market concerns. link">Bitcoin gained +2.16% over the past 7 days while Ethereum gained +11.50% over 30 days, with both approaching two-month highs as optimism around peace negotiations drove broad risk-on rotation. The total crypto market cap rose 4% to $2.6 trillion during this period. However, [scammers are exploiting geopolitical tensions](https://www.theblock.co/post/398233/scammers-demand-crypto-clearance-fees-from-ships-near-strait-of-hormuz-report) by demanding crypto "clearance" fees from ships near the Strait of Hormuz. Greek maritime risk firm MARISKS warned shippers of fraudulent demands for Bitcoin or USDT payments, highlighting how crypto's borderless nature attracts both legitimate and illegitimate use cases during geopolitical uncertainty. [Strategy added 34,164 BTC for $2.54 billion](https://t.me/alearesearch/1436), representing Michael Saylor's company's third-largest Bitcoin purchase on record. This institutional accumulation continues despite market volatility, suggesting long-term conviction among corporate treasuries remains strong.