DeFi TVL May 2026 Week 3: $98M in Exploits, Aave Recovery & MoonPay Trade
Welcome to the Portals DeFi Weekly.
This week, we examine the $98M DeFi hack crisis that struck across THORChain, Verus Bridge, and Echo Protocol within five days.
Also, Aave's restoration of WETH borrowing as the KelpDAO recovery progresses, MoonPay's launch of its institutional DeFi platform, and Standard Chartered's $4 trillion tokenization forecast.
Meanwhile, stablecoin market cap stands at $322.92B as the DeFi ecosystem continues to process the implications of recent security incidents.
Market Pulse
Summary
- Total Market Cap: $2.64T
- DeFi TVL: $82.08B
- BTC Price: $76,751 (-3.0% 7d)
- ETH Price: $2,117(-4.4% 7d)
- ETH Gas: 0.15 Gwei
- Sentiment: Fear (39)
- Stablecoin Market Cap: $322.92B
The crypto market has entered a risk-off phase this week, with total market cap pulling back to $2.65T as three major DeFi exploits in five days have shaken confidence across the ecosystem.
Bitcoin declined to $76,751, while Ethereum fell to $2,117, extending its underperformance as restaking-related contagion from the KelpDAO incident continues to weigh on sentiment.
Total DeFi TVL contracted to $82.08B, reflecting a combination of price-driven value compression and capital withdrawals following the week's security incidents, which collectively drained over $98M from DeFi protocols.
The Fear and Greed Index sits at 39 (Fear), a notable deterioration from last week's Neutral reading. Market participants are rotating out of riskier DeFi positions and seeking shelter in stablecoins and lower-risk yield venues.
Gas fees on Ethereum remain historically low at 0.15 Gwei due to reduced on-chain activity and the ongoing migration of users to Layer-2 networks.
Stablecoin market cap stands at $322.92B, marginally below last week's all-time high of $322.99B, reflecting the continued structural demand for dollar-denominated liquidity in DeFi even amid broader market stress.
The Yield Market Pulse
The yield landscape this week reflects a flight to quality, with capital concentrating in established, battle-tested protocols.
Pendle's fixed-rate ecosystem continues to attract allocators seeking predictable returns, with a Principal Token on apxUSD expiring in November offering double-digit yields.
Morpho's isolated lending markets are drawing capital from users seeking diversified exposure with contained risk, while Steakhouse Financial and Benqi offer conservative anchors for risk-averse allocators on Base and Avalanche, respectively.
Top Opportunities This Week
- APY: 12.38%
- TVL: $6.59M
- Network: Ethereum
PT apxUSD 5NOV2026 is a Pendle Principal Token on apxUSD, the yield-bearing stablecoin issued by Dinero (formerly Redacted Cartel).
apxUSD auto-compounds consensus rewards, MEV, and EigenCloud restaking yield, making this PT a high-conviction fixed-rate position.
- APY: 6.43%
- TVL: $10.66M
- Network: Ethereum
Morpho Clearstar USDC Reactor is a curated lending vault on Morpho Blue. The vault dynamically allocates USDC across Morpho's isolated lending markets, optimising for yield while maintaining risk separation between collateral types.
The curator model means allocations are actively managed, providing a layer of oversight that passive lending pools do not offer.
- APY: 5.52%
- TVL: $24.34M
- Network: Base
Steakhouse Financial High Yield Instant is a yield vault on the Base network managed by Steakhouse Financial. The vault focuses on generating sustainable yield through diversified DeFi strategies on Base, providing a stable return profile for ecosystem participants.
Steakhouse Financial is a recognised DeFi risk management firm with a track record of conservative vault curation.
- APY: 5.20%
- TVL: $24.41M
- Network: Avalanche
Benqi USDCn is a lending market on the Avalanche-based Benqi protocol. As one of the most established lending protocols on Avalanche, Benqi provides a reliable venue for stablecoin yield, supported by deep liquidity and consistent borrowing demand from the Avalanche DeFi ecosystem.
- APY: 4.45%
- TVL: $56.02M
- Network: Ethereum
Morpho USDC / wstETH is an isolated lending market on Morpho Blue. Users supply USDC to borrowers who collateralize their positions with wstETH, one of the most liquid and widely accepted collateral assets in DeFi.
This is the highest-TVL pick in this week's selection, making it the most suitable option for capital-efficient, lower-risk stablecoin deployment.
DeFi News
Key developments in DeFi this week
- Three DeFi Protocols Lose $98M in Five Days
Three DeFi protocols, THORChain, Verus Bridge, and Echo Protocol, were exploited within five consecutive days between May 15 and May 19, collectively draining over $98 million from the ecosystem.
THORChain suffered a $10.8M cross-chain liquidity exploit on May 15, with attackers targeting the protocol's native swap infrastructure.
Verus Bridge lost $11.58M on May 18 after attackers abused a bridge validation flaw that allowed the release of Ethereum-side assets without confirming backing on the Verus side.
The attacker drained 1,625 ETH, 103.6 tBTC, and 147,000 USDC before swapping the assets into approximately 5,402 ETH. In a recent development, the attacker subsequently returned $8.5M while retaining the remainder as an informal bounty.
Echo Protocol's $76.7M loss on May 19, caused by the theft of a private admin key rather than a smart contract exploit.
Once the attacker gained control of the key, they could authorise contract interactions that drained protocol funds entirely off-chain, bypassing all on-chain security logic.
May 2026 became the highest single-month hack volume of the year, with the three attacks between May 15–19 alone exceeding total monthly hack losses from Q1 2026 combined.
- Aave Restores WETH Borrowing as KelpDAO Recovery Advances
Aave has restored loan-to-value ratios for wrapped Ether collateral across six networks. This includes Ethereum Core, Ethereum Prime, Arbitrum, Base, Mantle, and Linea. This was the result of a governance vote that lifted emergency restrictions introduced after the April 18 KelpDAO exploit.
Aave founder Stani Kulechov confirmed the restoration on May 18, noting that recovery efforts had progressed sufficiently to remove the WETH freeze without additional user risk. The restrictions had been introduced after attackers used unbacked rsETH as collateral on Aave V3 to borrow large amounts of WETH, generating approximately $195M in bad debt.
A parallel legal dispute over 30,765 ETH (roughly $71M) frozen by the Arbitrum Security Council remains unresolved.
- MoonPay Launches Institutional DeFi Platform Integrating Morpho and Aave
MoonPay launched MoonPay Trade on May 21, a new institutional platform offering banks, fintechs, and enterprise clients unified access to tokenized assets, DeFi protocols, and stablecoin liquidity across more than 200 blockchain networks.
The platform integrates directly with Morpho, Aave, and Maple Finance for on-chain lending and yield generation, and supports tokenized fund subscriptions and cross-chain collateral management.
The launch comes as research by Tanaka estimates that only approximately 10% of tokenized real-world assets are currently deployed in DeFi protocols.
- Standard Chartered Projects $4 Trillion in Tokenized Assets by 2028
Standard Chartered's digital assets team published a forecast on May 19 projecting $4 trillion in tokenized assets on-chain by end-2028, with stablecoins and real-world assets each accounting for half of that pool.
- Hyperliquid HYPE Hits All-Time High Above $62
Hyperliquid's HYPE token surged to a new all-time high above $62 this week, driven by accelerating demand for the spot Hyperliquid ETFs launched by Bitwise (BHYP) and 21Shares (THYP) earlier this month.
The state of chains
Top DeFi protocols by TVL
Lido remains the largest DeFi protocol by TVL at $18.84B, though it has experienced a 5.97% contraction over the past seven days.
ETH price weakness and competitive pressure from newer liquid staking alternatives continue to weigh on its position.
Aave holds the second spot at $14.18B, showing relative resilience with a 3.07% decline despite the ongoing legal proceedings surrounding the frozen Arbitrum ETH and the broader market downturn.
The restoration of WETH borrowing limits is expected to gradually normalise lending activity.
Binance Staked ETH sits at $7.86B (-6.95% 7d), while Morpho has grown to $7.38B (-2.24% 7d), continuing its steady accumulation of isolated lending market share even in a risk-off environment.
EigenCloud declined 9.89% to $6.68B as restaking yields face compression following the broader liquid restaking sector's turbulent period.
Sky (formerly MakerDAO) stands out as a relative outperformer this week, with its TVL holding at $5.92B, while Ethena has seen a 9.51% increase to $5.46B, continuing to attract capital into its synthetic dollar ecosystem.
Chain Performance Analysis
Ethereum's TVL declined 3.61% over the past seven days to $42.88B, extending a broader trend that has seen its DeFi dominance compress from 63.5% at the start of 2025 to approximately 52% this week.
Solana is the standout performer among major chains, growing 0.93% to $5.59B and maintaining its position ahead of BSC ($5.55B, -1.36%) in the chain rankings.
Tron declined 1.03% to $5.08B, while Base pulled back 7.92% to $4.50B following its strong performance in prior weeks. Arbitrum experienced a 5.28% contraction to $1.50B, with liquidity migrating to competing chains.
Hyperliquid L1 continued its extraordinary growth trajectory, adding another 10.41% to reach $1.66B in TVL, driven by the institutional momentum behind the spot HYPE ETFs and growing perpetual DEX volume.
Sui and Monad were the week's other notable movers, with Sui maintaining momentum following last week's CME futures launch and Monad growing 4.08% as capital diversified into newer high-performance chains.
Portals Platform Updates
Next week on The DeFi Drop: Episode featuring Royco. Check full DeFi Drop episodes here.
If you are new to Portals, explore our latest blog that simplifies the Complete Portals Product Suite.
Looking ahead: Market
Key Catalysts to Watch
The most significant near-term catalyst is the market's response to the $98M exploit crisis.
The three exploits between May 15 and May 19 have highlighted persistent vulnerabilities in cross-chain bridge infrastructure and admin key management.
The market will be watching closely for protocol-level responses, including the adoption of decentralized validator sets, time-locked withdrawals, and on-chain circuit breakers.
The MoonPay Trade launch deserves close attention as a signal of institutional DeFi adoption.
With only an estimated 10% of tokenized RWA liquidity currently deployed in DeFi protocols, the arrival of institutional execution infrastructure that routes capital directly into Morpho, Aave, and Maple Finance could materially shift TVL dynamics in the coming months.
Finally, the Standard Chartered $4T tokenization forecast and the CLARITY Act's progress through Congress shows the most significant macro catalysts for DeFi's structural growth.
If the bill passes in 2026 as Polymarket traders currently price at 64%, it would open the door for large institutional treasurers to begin parking tokenized funds inside open lending venues at scale, confirming DeFi's transition from speculative trading venue to institutional infrastructure.
Market Outlook
The overall market outlook for the coming week is cautiously fearful. The ecosystem is digesting the prior week's security incidents and processing the implications of the $98M hack crisis, which has reinforced concerns about bridge security and admin key centralisation.
Users should exercise heightened diligence when interacting with protocols that rely on admin key controls or bridge-adjacent mechanics, and should consider using transaction simulation tools before committing capital to unfamiliar venues.
The growing adoption of transaction simulation tools like Portals Foresight provides a practical layer of defence against these risks.
For last week's data and analysis, see the DeFi TVL Weekly, 12th May 2026.
About portals.fi: portals.fi is the DeFi Super App. A one-click gateway to the entire on-chain economy.
Powered by real-time data and seamless execution, portals.fi connects traders to over 20 million assets, thousands of protocols, and every major blockchain.
Disclaimer: The content of this newsletter is for informational purposes only. It is not investment advice. Please do your own research and consult with a qualified financial advisor before making any investment decisions.
DeFi investments carry significant risks, and past performance does not guarantee future results. Read the disclaimer here.
Portals.fi Blog Newsletter
Join the newsletter to receive the latest updates in your inbox.
