Market Watch
Things to Watch This Week (Apr 20 - Apr 24)
Inflation, Oil Shock, and Earnings in Focus
Investors remain focused on the geopolitical backdrop, particularly U.S.-Iran tensions and ongoing uncertainty around the Strait of Hormuz, which continues to pose risks to global oil supply. Oil prices remain volatile, reigniting concerns about inflationary pressures. This adds uncertainty to the interest rate outlook as markets assess the potential for prolonged energy-driven inflation.
Random Musing This Week
When Collateral Breaks: The Hidden Risk Behind the Kelp Exploit
Kelp DAO is a liquid restaking protocol that allows users to deposit ETH, earn additional yield through EigenLayer, and receive rsETH as a tradable staking receipt. The Kelp exploit — where unbacked rsETH was minted via a compromised cross-chain bridge and used to extract real liquidity from DeFi protocols — stands as the largest DeFi hack of 2026 so far, but more importantly, it highlights how the nature of crypto exploits is evolving.
Looking at recent data, the majority of losses are no longer driven by traditional smart contract bugs alone. Instead, they are dominated by key compromises, phishing attacks, access control failures, and increasingly, complex cross-chain vulnerabilities. The attack surface in DeFi has expanded beyond isolated code errors into interconnected infrastructure.
Against this backdrop, the Kelp exploit was not an outlier — it was a continuation of this trend. At the center of the incident was a failure in cross-chain message validation. By exploiting Kelp DAO’s LayerZero-powered bridge, the attacker was able to mint unbacked rsETH without depositing any underlying ETH. Unlike many historical exploits, this did not involve draining liquidity pools directly or manipulating price oracles. Instead, it created synthetic collateral that appeared valid within the system. Once minted, the attacker deposited this unbacked rsETH into Aave and borrowed real WETH against it. By the time the protocol reacted, over $200 million in real assets had already been extracted.
The implications are structural. In a composable DeFi environment, assets like rsETH move freely across protocols and chains, often reused as collateral multiple times. This interconnectedness allows capital to flow efficiently, but it also enables risk to propagate rapidly. A single compromised asset can cascade through lending markets, liquidity pools, and derivative positions. This is exactly what happened. Within hours, lending markets froze, billions of dollars in liquidity exited, and utilization rates spiked. The event quickly transitioned from a protocol-specific exploit into a system-wide liquidity shock.
It also reinforces a growing tension in DeFi design. Shared liquidity and composability maximize efficiency, but they assume that all integrated components are reliable. As attack vectors shift toward infrastructure and cross-chain systems, that assumption becomes increasingly fragile. Ultimately, the Kelp exploit suggests that the next phase of DeFi risk is less about breaking code and more about breaking trust in the inputs.
In an ecosystem where everything is connected, verifying what goes into the system may matter more than securing what happens inside it.
Recap of Top Stories (Apr 13 - Apr 17)
Interesting
2026’s biggest crypto exploit: $292 million gets drained from Kelp DAO with wrapped ether stranded across 20 chains
Commentary: The attacker tricked LayerZero’s cross-chain messaging layer into believing a valid instruction had arrived from another network, which triggered Kelp’s bridge to release 116,500 rsETH to an attacker-controlled address.
With that reserve drained, holders on non-Ethereum deployments now face the question of whether their tokens have anything underneath them, which creates a feedback loop where panic redemptions on L2s pressure the unaffected Ethereum supply.
Rakuten to allow XRP to be used as payment method by its 44 million customers
Commentary: Japan’s e-commerce giant Rakuten’s subsidiary Rakuten Wallet is adding XRP to its Rakuten Pay app, allowing its 44 million users to use Ripple’s cryptocurrency as a payment method with more than 5 million merchant locations across the country.
Tatsuya Kohrogi, Ripple’s senior ecosystem growth manager, said they will also be able to purchase XRP with Rakuten points and hold it in their Rakuten Wallet. The fact that XRP is now embedded into its loyalty and payments infrastructure is a powerful signal of where digital asset adoption is heading.
South Korea to test blockchain deposit tokens for government spending in Q4
Commentary: South Korea’s Ministry of Economy and Finance will begin testing blockchain-based deposit tokens for government spending in the fourth quarter as part of a broader push to modernize how public funds are managed.
Token-based payments can be programmed with predefined conditions, including limits on when funds can be used and which industries can accept them. The system also removes intermediaries such as card networks, which the ministry says could lower transaction fees for small businesses that receive government payments.
Goldman Sachs files for bitcoin income ETF in crypto push
Commentary: The proposed fund would give investors exposure to bitcoin while generating income through a premium-based strategy.
Asset managers are increasingly trying to package bitcoin into products that resemble dividend-paying stocks or income funds, rather than relying only on price gains. Goldman’s move signals that competition is expanding beyond spot bitcoin exposure into more complex strategies designed to generate steady returns.
XRP Ledger adds zero-knowledge proofs targeting institutional privacy gap
Commentary: The move is designed to let financial institutions transact privately on the public blockchain while meeting regulatory requirements.
Transaction flows, treasury positions, and counterparty relationships are visible by default on public ledgers. Zero-knowledge proofs solve this by allowing one party to prove a statement is true without revealing the underlying data.
Visa and Zodia Custody join Stripe’s new blockchain for machine payments
Commentary: Alongside Stripe, Visa and Zodia will participate in the Tempo blockchain by maintaining network security and verifying transactions.
Now the focus is on supporting the evolution of new payment flows such as machine-to-machine commerce using AI agents. Sheffield believes the crypto industry is entering a phase where decentralization is no longer the primary value proposition.
Upcoming Market Events
April 29 - FOMC Interest Rate Decision