🍪 Today's Snack
Crypto closed a wild weekend mostly flat as two storylines ran into each other. Iran's Hormuz reversal killed Friday's relief rally, and a $292M Kelp DAO exploit dragged $13B out of DeFi by Sunday night.
📈 24h Crypto Market Snapshot
Total crypto market cap edged up to $2.54T (+0.46%), while Fear & Greed held neutral at 53. The tape was flat on majors, but that calm masked what happened underneath. DeFi-wide TVL fell 7% in 24 hours as dozens of protocols froze bridges after the Kelp attack.
Asset | Price (USD) | 24h Change | Market Cap |
|---|---|---|---|
BTC | $75,063 | -0.05% | $1.50T |
ETH | $2,306 | -0.09% | $278B |
XRP | $1.42 | +0.17% | $87B |
BNB | $626 | +1.12% | $84B |
SOL | $85.11 | +0.49% | $48B |
Flat on the surface, with majors absorbing a weekend that brought both a macro reversal and DeFi's worst single-day shock of 2026.
🔥 Top 3 Movers & Shakers
BinanceLife (币安人生) - +9.61%
The BNB Chain meme token kept running after setting a new all-time high on April 18. The move traces back to a CZ social media post from October 2025 and still has no protocol-level catalyst.
Takeaway: When 24h volume is more than half the market cap, it points to speculative churn, not organic accumulation.Mantle (MNT) - -6.32%
Mantle was among the L2s that hosted wrapped rsETH through Kelp’s drained bridge, and sentiment around the ecosystem weakened over the weekend. The chain itself was not touched.
Takeaway: When a restaking token’s cross-chain reserve gets wiped, the host L2 can take reputational damage even if the chain was never exploited.RaveDAO (RAVE) - +60.95%
RAVE is still swinging after a 90%+ collapse from its April 18 high, which followed a 10,800% nine-day pump. Binance and Bitget opened investigations, and ZachXBT flagged about 90% of supply in three team-linked wallets.
Takeaway: That kind of supply concentration can make the move violent in both directions
🏦 ETF & Institutional Flows
Bitcoin spot ETFs recorded $663M in net inflows on Friday, while Ethereum ETFs saw $127M in inflows. Renewed conviction. Institutions bought hard into Iran's Hormuz reopening headline before the Saturday reversal turned the setup sour.
🌍 Market Context
Macro Pulse: Iran said the Strait of Hormuz was “completely open” on Friday, sending oil sharply lower and pushing stocks higher. By Saturday that reversed: the IRGC fired on tankers, a container ship was hit off Oman, Brent jumped back above $96, and the ceasefire deadline remained April 22.
On-Chain Highlights: DeFi TVL fell from $99.5B to $86.3B over the weekend as dozens of protocols froze LayerZero OFT bridges. Ethena, ether.fi, Tron DAO, Curve, Lido's earnETH, SparkLend, Fluid and Upshift all moved at once. None of them were exploited. They were all connected to the same infrastructure layer.
🔍 Deep Dive - Kelp DAO: how one bridge verifier drained $13B out of DeFi in 48 hours
On Saturday at 17:35 UTC, an attacker forged a single LayerZero message and Kelp's cross-chain bridge released 116,500 rsETH, about $292M or 18% of circulating supply, to a wallet funded through Tornado Cash ten hours earlier. Kelp paused contracts 46 minutes later. By then the damage had already jumped chains.
The technical cause was straightforward. Kelp ran a 1/1 DVN configuration, meaning LayerZero Labs was the sole entity verifying bridge messages, despite repeated recommendations to use multi-verifier. LayerZero preliminarily linked the attack to DPRK's Lazarus Group.
But the exploit was not the expensive part. The cascade was. The attacker did not sell the stolen rsETH. They deposited it into Aave V3 and V4 as collateral and borrowed real WETH against it. Aave's TVL dropped from $26.4B to roughly $20B. The AAVE token fell 16 to 18%. The protocol now sits on roughly $196M in bad debt backed by a $50M Umbrella reserve. Aave's own contracts were never compromised, but its risk parameters had priced rsETH as if a bridge on another chain could never fail. That assumption is now being repriced across every lending protocol that lists restaking tokens as collateral.
📰 Top News
Kelp DAO hack becomes 2026’s biggest DeFi exploit: The $292M drain overtook Drift’s April 1 loss and pushed Lazarus-linked DeFi thefts sharply higher this month.
Kraken parent Payward buys Bitnomial for $550M: The deal gives it the full CFTC license stack needed to roll out US crypto derivatives faster.
Senator Blumenthal presses DOJ and FinCEN on Binance monitors: His April 17 letters question whether Binance’s post-2024 compliance oversight is still working.
Circle launches a native USDC cross-chain bridge: The burn-and-mint product went live April 18, giving users a Circle-run alternative to third-party bridges.
Deutsche Börse takes a $200M stake in Kraken: The investment valued Kraken at $13.3B and came just days before the Bitnomial deal.
📊 Daily Wrap-Up
This was a shock weekend, not a trend weekend. Majors held up, but DeFi took the harder hit as the Kelp fallout spread beyond the initial exploit. The key risk this week is whether the Aave backstop debate grows into broader concern around LRT collateral.
Today’s Watch List: Watch Aave governance for signals on whether the Umbrella reserve gets expanded or whether stkAAVE slashing gets activated to cover the bad-debt gap. Also watch rsETH peg stability on non-Ethereum L2s, and any developments around the April 22 Hormuz ceasefire deadline.
Read more on websnack.org - free daily alpha in under 5 minutes.
P.S. 4-6 min read. Free daily alpha. Unsubscribe anytime. © Web Snack 2026.
This newsletter is for informational purposes only and does not constitute investment advice. Always conduct your own research and make independent decisions.
