A security incident at Kelp, a cash withdrawal protocol, has caused a ripple effect across the decentralized finance industry, leaving one of Lido Finance’s yield vaults caught in the crossfire. Lido has paused deposits and withdrawals from its EarnETH vault while it resolves two separate but related issues: direct exposure to a compromised asset and a liquidity crisis spreading across credit markets.
The exposure
Lido’s EarnETH vault has about 9% of its total assets tied to rsETH, the token at the center of the Kelp incident. That’s not a majority stake, but it’s enough to trigger a pause while administrators work out exactly how much, if anything, has been lost.
The Arbitrum Security Council has already recovered approximately $70 million in ETH linked to the attack. Further recovery efforts are underway, but final accounting of losses has not yet been completed.
A second problem: the credit crisis
In addition to the rsETH exposure, EarnETH also deals with a separate headache. Increased interest rates in the credit markets have put pressure on looping strategies within the vault that have nothing to do with Kelp. Vault administrators have been actively reducing these positions, and Lido says that quick action has already led to a significant reduction in outstanding wETH debt. A fuller update on progress is expected soon.
The safety net is being tested
If losses are confirmed when the dust settles, Lido will have a mechanism ready. The Lido DAO treasury has a $3 million first-loss position in the EarnETH vault, which was placed specifically for situations like this. Under the protection mechanism, the DAO’s vault shares would be burned to absorb losses before ordinary savers feel the pinch, essentially using sovereign wealth funds as a buffer.
The scheme was approved by Lido’s board earlier this year as part of a broader effort to make the Earn product credible enough to scale. Monday’s events are the first real test.
What it means
DeFi’s interconnected architecture means that a breach of a single protocol can travel far and fast. The Kelp incident has now affected credit market liquidity, token recapture and yield vault strategies across multiple platforms simultaneously.
For Lido, the immediate priority is to limit the damage and restore normal operation of the vault. For the broader market, it’s a reminder that returns on decentralized finance are rarely optional.

