Nearly $1 billion of net inflows into US-listed spot bitcoin exchange-traded funds last week has strengthened the market case for a more durable advance in the largest cryptocurrency, even as a sprawling exploit at Kelp DAO rattled confidence across decentralised finance and exposed fresh fault lines in cross-chain infrastructure. Bitcoin was trading near $75,900 on Tuesday, after weekly ETF inflows reached about $996.4 million, with a single-day haul of roughly $663.9 million on April 17 marking the strongest session since mid-January.
The split-screen picture now shaping the digital-asset market is unusually stark. On one side, regulated investment products tied to bitcoin are drawing steady institutional demand after a difficult start to the year, suggesting large investors still see pullbacks as an entry point rather than a signal to retreat. On the other, the Kelp episode has revived doubts about the risk controls underpinning some of the most complex parts of the DeFi ecosystem, particularly where restaking, bridges and leveraged lending intersect.
Flow data show that BlackRock’s IBIT remained the main magnet for fresh money on April 17, with Fidelity’s FBTC and Ark’s product also contributing materially to the day’s surge. The rebound in demand followed a period of uneven appetite through the first quarter, when price volatility, a broader sell-off in technology shares and geopolitical strain had weighed on sentiment. Even so, March had already broken a multi-month stretch of net withdrawals from US spot bitcoin funds, and last week’s acceleration has encouraged traders who argue that institutional sponsorship is again cushioning downside moves.
Bitcoin’s resilience matters because it has come at a time when risk assets have been whipsawed by war-linked oil concerns, shifting rate expectations and weakness across parts of the equity market. The token remains well below its 2026 peak, but it has held above levels that many market participants had feared would fail under macro pressure. That has fed the view that ETF demand is changing the character of the market, making it less dependent on leveraged speculative flows and more responsive to long-horizon portfolio allocation.
Set against that constructive backdrop, the Kelp DAO exploit landed like a warning shot. The attack, disclosed over the weekend after suspicious activity on April 18, involved roughly 116,500 rsETH worth about $292 million, making it one of the largest crypto exploits of 2026. Early technical assessments indicated that the breach centred on Kelp’s LayerZero-powered bridge route, allowing the attacker to move unbacked collateral that then spread risk into other protocols. Kelp paused deposits and withdrawals on affected routes while the wider ecosystem moved into damage-control mode.
The consequences quickly spilled into Aave, where rsETH had been used as collateral. Aave stated that its own contracts were not hacked, but it froze rsETH markets on V3 and V4 as a protective measure. An incident report published through Aave governance said no final decision had yet been confirmed on loss allocation or recovery, while modelling from service providers suggested potential bad debt across affected markets could range from about $123 million to $230 million depending on how losses are socialised. That uncertainty was enough to trigger large withdrawals and a sharp fall in Aave’s total value locked. ][5])
By Tuesday, containment efforts had widened. Arbitrum’s Security Council froze 30,766 ETH linked to the exploit, worth roughly $71 million at prevailing prices, in one of the clearest signs yet that parts of the crypto industry are becoming more willing to use emergency governance powers when systemic risk spreads beyond a single protocol. Preliminary indicators cited by infrastructure players pointed to a highly sophisticated actor, with some early assessments raising the possibility of a state-backed link, though attribution remains tentative.
The split-screen picture now shaping the digital-asset market is unusually stark. On one side, regulated investment products tied to bitcoin are drawing steady institutional demand after a difficult start to the year, suggesting large investors still see pullbacks as an entry point rather than a signal to retreat. On the other, the Kelp episode has revived doubts about the risk controls underpinning some of the most complex parts of the DeFi ecosystem, particularly where restaking, bridges and leveraged lending intersect.
Flow data show that BlackRock’s IBIT remained the main magnet for fresh money on April 17, with Fidelity’s FBTC and Ark’s product also contributing materially to the day’s surge. The rebound in demand followed a period of uneven appetite through the first quarter, when price volatility, a broader sell-off in technology shares and geopolitical strain had weighed on sentiment. Even so, March had already broken a multi-month stretch of net withdrawals from US spot bitcoin funds, and last week’s acceleration has encouraged traders who argue that institutional sponsorship is again cushioning downside moves.
Bitcoin’s resilience matters because it has come at a time when risk assets have been whipsawed by war-linked oil concerns, shifting rate expectations and weakness across parts of the equity market. The token remains well below its 2026 peak, but it has held above levels that many market participants had feared would fail under macro pressure. That has fed the view that ETF demand is changing the character of the market, making it less dependent on leveraged speculative flows and more responsive to long-horizon portfolio allocation.
Set against that constructive backdrop, the Kelp DAO exploit landed like a warning shot. The attack, disclosed over the weekend after suspicious activity on April 18, involved roughly 116,500 rsETH worth about $292 million, making it one of the largest crypto exploits of 2026. Early technical assessments indicated that the breach centred on Kelp’s LayerZero-powered bridge route, allowing the attacker to move unbacked collateral that then spread risk into other protocols. Kelp paused deposits and withdrawals on affected routes while the wider ecosystem moved into damage-control mode.
The consequences quickly spilled into Aave, where rsETH had been used as collateral. Aave stated that its own contracts were not hacked, but it froze rsETH markets on V3 and V4 as a protective measure. An incident report published through Aave governance said no final decision had yet been confirmed on loss allocation or recovery, while modelling from service providers suggested potential bad debt across affected markets could range from about $123 million to $230 million depending on how losses are socialised. That uncertainty was enough to trigger large withdrawals and a sharp fall in Aave’s total value locked. ][5])
By Tuesday, containment efforts had widened. Arbitrum’s Security Council froze 30,766 ETH linked to the exploit, worth roughly $71 million at prevailing prices, in one of the clearest signs yet that parts of the crypto industry are becoming more willing to use emergency governance powers when systemic risk spreads beyond a single protocol. Preliminary indicators cited by infrastructure players pointed to a highly sophisticated actor, with some early assessments raising the possibility of a state-backed link, though attribution remains tentative.
Topics
Cryptocurrency