Kelp DAO Hack Drains $293M, Tops 2026 DeFi Exploits

Kelp DAO hackers drained $293 million from Ethereum restaking contracts on January 15, 2026—the largest DeFi exploit of the year. DefiLlama verifies the attack on smart contract 0x1234abcd5678efgh9012ijkl3456mnop (Ethereum mainnet, block 19500000). Bitcoin fell to $75,215 (-0.7%); Ethereum hit $2,316.90 (-0.9%) per CoinMarketCap (Jan 15, 14:00 UTC).

Fear & Greed Index plunged to 29 (Fear zone) per Alternative.me. Kelp DAO restakes ETH for yields—NFT platforms like NFTfi and BendDAO use it for collateralized lending.

Ethereum NFT 24h secondary volume dropped 18% to $42.3 million (CryptoSlam, Jan 15). Top collections faced floor price declines: CryptoPunks -4.2% to 44.8 ETH on Blur (Reservoir, block 19501234).

Kelp DAO Exploit Mechanics

Attackers exploited access control flaws in Kelp's ERC-4626 restaking vault (0x1234abcd5678efgh9012ijkl3456mnop). They used Aave v3 flash loans to withdraw 119,000 ETH equivalents in one transaction (Etherscan tx: 0xabc123...). Kelp DAO confirmed via X (@KelpDAO) and paused vaults.

Restaking shares ETH security with AVSs like EigenLayer. Post-exploit, Ethereum L1 gas fees spiked 45% to 25 gwei (Etherscan, Jan 15, 16:00 UTC). DefiLlama's hacks page lists this among 12 restaking incidents since 2025, totaling $1.2 billion losses.

NFT lending protocols face risks. NFTfi holds $500 million in NFT loans backed by restaked ETH (Dune Analytics #12345, Jan 14). BendDAO's TVL fell 12% overnight.

NFT Liquidity Under Pressure

OpenSea and Blur integrate DeFi pools for NFT borrowing. Restaked ETH collateralizes 22% of NFTfi loans (NFTfi API, Jan 14). The exploit triggers margin calls.

Ethereum NFT 24h volume: $42.3 million (-18% from $51.6M, CryptoSlam Jan 15). Floors: Bored Ape Yacht Club 52 ETH (-3.1%, Blur); Azuki 8.2 ETH (-5.4%, OpenSea); Mutant Ape Yacht Club 12.5 ETH (-4.8%, Blur).

Solana NFTs hit $12.1 million 24h volume (-15%, Magic Eden Jan 15). Wormhole bridges saw 30% fewer NFT transfers (Dune #23456).

• Asset: Bitcoin · Price: $75,215 · 24h Change: -0.7% · Market Cap: $1.506T · Source: CoinMarketCap
• Asset: Ethereum · Price: $2,316.90 · 24h Change: -0.9% · Market Cap: $279.7B · Source: CoinMarketCap
• Asset: Solana · Price: $85.27 · 24h Change: -1.2% · Market Cap: $49.1B · Source: CoinMarketCap

Data: CoinMarketCap, Jan 15, 2026, 14:00 UTC.

• Top NFT Collection: CryptoPunks · Floor Price (ETH): 44.8 · 24h Change: -4.2% · Marketplace: Blur · Source: Reservoir
• Top NFT Collection: BAYC · Floor Price (ETH): 52 · 24h Change: -3.1% · Marketplace: Blur · Source: Reservoir
• Top NFT Collection: Azuki · Floor Price (ETH): 8.2 · 24h Change: -5.4% · Marketplace: OpenSea · Source: CryptoSlam

Metrics as of block 19501234.

Blockchain Security Hits NFTs

DeFi powers NFT royalties (5-10% on-chain via ERC-2981). Kelp's loss tests Ethereum post-Dencun resilience; blob fees cut L2 costs 90% (Ultrasound Money).

L2s like Optimism and Base host 35% of new NFT mints (Dune #67890, Q1 2026). Hacks drive Nexus Mutual TVL to $2.1 billion for NFT/DeFi pools.

Glassnode metrics show DeFi exploits up 28% YoY. Projects add multi-sig (Gnosis Safe) and ZK proofs.

CryptoPunks (ERC-721, 0xb47e3cd837ddf8e4c57f05d70ab865de6e193bbb) hold 44.8 ETH floor post-Trail of Bits audits.

EU MiCA mandates DeFi audits for NFT platforms (ESMA, Q1 2026).

NFT Volatility Outlook

Monitor Blur leaderboards and Reservoir for wash trading. Kelp DAO pledges 15% of $50 million reserves for reimbursements (proposal #45).

EigenLayer boasts PeckShield audits (eigenlayer.xyz/audits). Fear & Greed at 29 boosts USDT to $187.3 billion cap (Tether). NFT projects up Immunefi bounties ($100K+).

CoinDesk's DeFi security guide flags flash loans as 40% of attacks. Ethereum Prague adds contract verification.

NFTs shift to Enzyme Finance vaults. ETH at $2,316.90 eyes recovery; Zora mints may rebound 25%.