Crypto Briefing — April 24, 2026

🔥 Top Story

The Kelp DAO bridge exploit is still rippling through DeFi six days later. Attackers drained $293 million in rsETH on April 18 by exploiting a single-validator bridge setup, minting unbacked tokens, and dumping them as collateral into Aave v3 to borrow wrapped ETH. The aftermath: Aave is sitting on roughly $195 million in bad debt, its TVL cratered by $8 billion (from ~$26.4B to ~$18.6B), and some stablecoin pools hit 100% utilization—locking over $5 billion in deposits. Aave's governance token plunged nearly 20% to $89.50 before stabilizing around $94. Jefferies analyst Andrew Moss warned the incident could temporarily slow TradFi tokenization initiatives as banks rethink cross-chain security. The silver lining: Aave, Lido, and EtherFi are coordinating a recovery effort to backstop the hole with ETH.

📊 Market Snapshot

BTC/ETH: Bitcoin is trading at ~$78,240, roughly flat over 24 hours (-0.3%). Ethereum is weaker at ~$2,332, down 2.6%. BTC dominance sits at 58.2%, continuing its long grind higher against alts.
Fear & Greed Index: 46 ("Fear") — sentiment remains cautious despite the ETF bid.
ETF Flows: Spot Bitcoin ETFs pulled in nearly $1 billion in net inflows for the week ending April 17, the best weekly stretch since mid-January. Institutional demand is clearly there; the market just can't hold a bid above $80K.
Aave (AAVE): Down ~20% from pre-exploit levels but off the lows. The protocol is technically solvent but liquidity is severely impaired in key markets.

💰 Crypto Highlights

Justin Sun Sues Trump's World Liberty Financial: Sun, who invested ~$75 million in WLFI ($30M initially, then $45M for 3 billion tokens), alleges the Trump family venture illegally froze $320 million worth of his tokens. WLFI fired back, calling the suit a "desperate attempt to deflect attention from Sun's own misconduct." The lawsuit adds legal pressure to a project already facing uncomfortable questions.
Iran's Central Bank Linked to WLFI Networks: A Reuters investigation published this week found that Iran's central bank and its largest crypto exchange, Nobitex, moved funds through networks tied to major backers of World Liberty Financial. The revelation raises serious sanctions-evasion and conflict-of-interest questions around a project where Trump is a financial beneficiary.
SEC Eases Retail Margin Rules: The SEC removed the pattern-day-trader barrier for Bitcoin, allowing retail investors to day-trade BTC with as little as $2,000 in margin. Meanwhile, over 100 crypto companies are pressuring the Senate to advance the Clarity Act. The regulatory thaw continues, even if the headlines are messy.
Lazarus Group Deploys macOS Malware: North Korea's Lazarus Group is targeting crypto and fintech executives with a new macOS malware kit dubbed "Mach-O Man." The attack vector is fake Zoom or Google Meet invitations that prompt victims to run malicious commands. Credentials and macOS Keychain data are exfiltrated via Telegram before the kit self-destructs.

🎯 What to Watch

Aave Recovery Vote: Watch for a formal governance proposal from Aave, Lido, and EtherFi to deploy ETH and cover the $195M bad debt. If it passes cleanly, it could restore confidence; if it stalls, expect further outflows.
WLFI Token Unlock: World Liberty Financial's tokens are still largely non-tradeable. Any update on when (or if) WLFI becomes liquid will be a major catalyst—especially with Sun's lawsuit and the Iran investigation hanging over the project.
SEC Legislative Calendar: The Clarity Act is gaining industry backing. If Senate leadership signals floor time, expect a sentiment boost across U.S.-centric protocols and exchanges.

Compiled April 24, 2026. Data: CoinGecko, DeFiLlama, Alternative.me, Farside, Reuters, CoinDesk, Cointelegraph.