加载图片中Ethereum stablecoin and tokenized fund market cap drops 19% to $168B

Dado Ruvic 2

The KelpDAO exploit's aftershocks are still draining capital from Ethereum's dollar-pegged and tokenized fund markets months later

Mon 9 Nov 2026 · 14:25 EST · 3 min read

In Security

Share

Ethereum’s market for stablecoins and tokenized funds has shrunk 19% since the KelpDAO exploit. The combined figure slid from $206.7 billion to approximately $168 billion between April and early November 2026.

The decline matters because stablecoins and tokenized funds are the cash layer of decentralized finance. When that layer contracts, everything built on top of it has less to work with.

How one compromised node cost $292 million

The trouble started on April 18, 2026. Attackers made off with roughly $292 million, or 116,500 rsETH, from KelpDAO in a span of 46 minutes.

The entry point was KelpDAO’s bridge infrastructure. Specifically, the attackers compromised a single LayerZero decentralized verifier node, or DVN.

Once the hackers controlled that notary, they could manipulate the messages passing through it. They used that power to mint tokens that had nothing backing them.

Contagion moves faster than code

The damage did not stay inside KelpDAO. Major lending protocols, Aave among them, ran into immediate liquidity problems as users rushed to pull funds.

Industry-wide total value locked, the measure of assets parked in DeFi protocols, fell by $8–14 billion right after the exploit.

As of November 9, 2026, stablecoin supply on Ethereum stood at approximately $135 billion.

That stablecoin figure accounts for a significant portion of the overall decline. Tokenized funds make up the rest of the $168 billion total.

Lawsuits and a familiar suspect

The fallout has now moved to the courtroom. On November 9, 2026, KelpDAO’s parent company, Evercrest Technologies, filed suit against LayerZero Labs and its CEO.

The complaint alleges negligence, along with failures around security and disclosure tied to the exploit. Those are allegations, and they have not been tested in court.

LayerZero, for its part, has pointed the finger elsewhere. The company has linked the attack to North Korea’s Lazarus Group.

What this means for DeFi and Ethereum

For investors, the most immediate takeaway is about liquidity. A smaller stablecoin base on Ethereum means less dry powder sitting in DeFi.

The research also points to a shift in appetite. Higher-risk yield products attracted substantial capital throughout 2026, and the exploit has pushed holders to rethink those positions.

A $292 million loss traced back to the compromise of one verifier node is a stress test that cross-chain bridges failed in public.

For now, the numbers tell the story plainly. Ethereum’s stablecoin and tokenized fund market sits around $168 billion, down from $206.7 billion, and the capital that left has shown little urgency about coming back.

The key indicators to track are straightforward: whether Ethereum’s roughly $135 billion stablecoin supply stabilizes, how lending protocols like Aave manage liquidity, and what the Evercrest case reveals about bridge security once it reaches discovery.

Disclosure: This article was edited by John Chen. For more information on how we create and review content, see our Editorial Policy.