Last 24 Hours
THORChain still halted on day 3 — $10.8M cross-chain exploit unresolved, RUNE -12%
Attacker drained BTC, ETH, BSC and Base routes; wallets now hold 3,443 ETH, 36.85 BTC and 96.6 BNB. No post-mortem yet across the weekend. Cross-chain protocols have lost $2.8B since 2021.
Why it matters: Another bridge/router incident on a Friday — reinforces messaging-layer risk as the dominant 2026 DeFi failure mode and pressures every L1-to-L1 protocol's verifier set.
DeFi lending TVL drops into $30-40B band as Aave / Spark / Morpho rebalance
After hitting a ~$47B April peak, lending TVL is back in a $30-40B range. Aave V3 leads at $19.4B, then Spark $6.8B, Morpho Blue $4.9B, Compound V3 $2.7B, JustLend $2.4B. Fluid, Euler V2 and Kamino each up 3-5x YoY.
Why it matters: Lending is rebasing to a smaller equilibrium float as restaking/Kelp risk reprices. The "lending-plus-DEX hybrid" category (Fluid, Hyperliquid) is the only segment still expanding off a lower base.
Aave bumps V3 bug bounty to $5M as bridge spillover risk rises
Largest single bug bounty in DeFi after KelpDAO and THORChain — and after Aave's own April scare around an OP/ARB-side restaking vulnerability. Underwriters reportedly pushing for tighter coverage caps.
Why it matters: The leading money market is implicitly pricing tail risk higher — small reset on cost of capital across every protocol that builds on Aave rails.
Last 7 Days
Hyperliquid HYPE rips on Bitwise BHYP ETF + Coinbase USDC deployer deal
BHYP debuted on NYSE — first US crypto ETF where the issuer runs its own staking, 0.34% fee waived 1 month on first $500M. Coinbase becomes Hyperliquid's official USDC treasury deployer under the Aligned Quote Asset framework after USDH was phased out. Circle staked more HYPE same day.
Why it matters: ~$5B of USDC reserves will route yield back into HYPE buybacks via the Assistance Fund — a major structural bid for HYPE and a template for "regulated stablecoin to DEX" plumbing.
LayerZero says it "made a mistake" in the $292M KelpDAO exploit
Public mea culpa for allowing a single-DVN verifier setup to secure high-value transfers; industry best practice is multi-DVN. KelpDAO unwind deadline arrived May 14.
Why it matters: A rare accountability statement from core messaging infra — reframes bridge security from edge case to board-level liability and accelerates a multi-DVN standard.
Ethena USDe lands on Jupiter Lend + ENA goes live on Solana via Sunrise DeFi
USDe institutional lending market debut on Jupiter Lend (with Bitwise as anchor). ENA token deployed natively on Solana via Sunrise DeFi same week — wallet creation and whale activity hit a 90-day high.
Why it matters: Ethena is becoming multi-chain stablecoin yield infra — Solana exposure adds to a structurally underweighted USDe footprint outside EVM and unlocks SOL-side yield demand.