TL;DR — As of April 25, 2026: The Kelp DAO $292M hack on April 18 broke Aave’s USDC pool (99.87% utilization, under $3M liquidity available). Morpho curated vaults are currently offering approximately 5-7% APY on USDC with $7.67B TVL and no liquidity crisis. If you need stablecoin yield right now, Morpho is the more functional option — but curator selection matters, and all DeFi carries smart contract risk. This is what I do, not financial advice. APY fluctuates.
Last Saturday morning I opened my DeFi dashboard from a café in Canggu. My Aave USDC position was fine — technically. But I couldn’t withdraw it. The pool showed $287 available. As in, two hundred and eighty-seven dollars, on a platform with billions deposited.
That’s when I learned Kelp DAO had just lost $292 million and approximately $300 million in USDC borrowing had flooded into Aave overnight.
I’ve been writing about passive income on PassiveYieldLab for two years. I’ve seen markets freeze, protocols wobble, and bridges get drained. But watching a top-tier lending protocol go to 99.87% utilization in under 12 hours — that was a new one.
Here’s what I found when I started moving money around.
What Actually Happened with the Kelp DAO Hack
On April 18, 2026, attackers drained 116,500 rsETH from Kelp DAO’s LayerZero-powered bridge — approximately $292 million, making it the largest DeFi exploit of 2026.
The technical breakdown: Kelp ran a 1-of-1 verifier configuration on their LayerZero bridge. Attackers (who LayerZero linked to North Korea’s Lazarus Group) compromised two RPC nodes, ran a DDoS attack to force failover to the poisoned nodes, and tricked the bridge’s messaging service into issuing rsETH without actual ETH delivery. Wrapped rsETH became stranded across 20 chains. Kelp blames LayerZero’s default settings; LayerZero blames Kelp’s configuration choices. Either way, $292 million walked out the door.
The knock-on effect hit Aave hard. Borrowers rushed to take out USDC — likely to cover positions or exploit arbitrage — and the pool went parabolic on utilization. By April 22, Circle’s chief economist Gordon Liao had filed an emergency governance proposal to raise Slope 2 from 10% to 40% and pull utilization back below the kink. At the proposed maximum Slope 2 of 50%, supply rates could theoretically spike to 48% — enough to attract fresh deposits fast.
Bottom line: Aave itself was not hacked. But the downstream liquidity crisis is real and ongoing.
Is Aave Still Worth Using for Stablecoin Yield?
For USDC on Ethereum mainnet right now? Honestly, no — at least not until the liquidity crisis resolves.
Before the exploit, Aave V3 Ethereum USDC was offering approximately 2.61% APY (CoinDesk, April 7, 2026 — already below Interactive Brokers’ 3.14% T-bill rate). Post-exploit, the pool is essentially inaccessible for withdrawals.
That said, Aave isn’t going anywhere. The smart contracts are uncompromised. Aave V3 has been audited by Trail of Bits, Certora, and SigmaPrime, and has held billions in TVL through multiple market stress cycles. When the Circle proposal passes governance and utilization normalizes, Aave will be fine again.
For stablecoin suppliers right now though, you have better options.
Why Morpho Is Winning the Stablecoin Yield Race Right Now
Morpho currently holds $7.67 billion in TVL, making it the second-largest decentralized lending protocol after Aave. And its curated vault model means it didn’t face the same liquidity crunch.
Here’s the core difference in architecture:
Aave uses a pooled liquidity model. Every USDC supplier shares one pool with every USDC borrower. When borrowing demand spikes (like post-Kelp), utilization hits the ceiling and suppliers get locked out until new deposits arrive or loans are repaid.
Morpho uses peer-to-peer matching inside curated vaults. Risk curators (Steakhouse Financial, Gauntlet, RE7 Capital) build and manage individual vaults with their own collateral parameters, risk thresholds, and yield strategies. Borrowing demand in one vault doesn’t automatically drain another. And because P2P matching tightens the spread between supply and borrow rates, suppliers capture more yield.
As of April 25, 2026, Steakhouse USDC and similar curator-managed vaults on Morpho Ethereum are offering approximately 5-7% APY on USDC. That’s 2-3x what Aave was offering before the crisis — and with functioning liquidity. (APY fluctuates based on market conditions.)
Fireblocks launched a stablecoin yield product in April 2026 that routes institutional capital through both Aave and Morpho vaults. Coinbase expanded Morpho loans to the UK on April 20. Institutional inflows are arriving precisely when utilization numbers favor suppliers.
Morpho vs Aave: Direct Comparison
| Aave V3 (Ethereum) | Morpho (Steakhouse/Gauntlet) | |
|---|---|---|
| USDC APY (as of Apr 25, 2026) | ~2.61% (pre-crisis); currently inaccessible | ~5-7% (vault-dependent) |
| TVL | ~$18B | $7.67B |
| Liquidity Status | ~99.87% utilization, crisis mode | Normal — vault-dependent |
| Smart Contract Risk | Lower (audited, years of battle-testing) | Moderate (additional vault layer) |
| Curator Risk | N/A | Depends on curator quality |
| Minimum Deposit | None | None |
| Withdrawal Speed | Currently delayed | Normal |
| Audit Status | Trail of Bits, Certora, SigmaPrime | Formally verified (Certora), 650-line immutable core |
| Institutional Backing | Deep | Growing — Fireblocks, Coinbase |
APY fluctuates with market conditions. Data as of April 25, 2026.
How Do I Choose the Right Morpho Vault?
Not all Morpho vaults are equal. This is the piece most “best yield” articles skip.
Morpho Blue markets are permissionless — anyone can create a vault with any parameters. A random high-yield vault could be collateralized by illiquid or volatile assets, or managed by an unknown team with no track record.
The curators I look at for USDC:
Steakhouse Financial — institutional-grade, conservative, specializes in stablecoin vaults. Think of it like a money-market fund inside DeFi. Their USDC vault on Ethereum has been running since 2024 with a publicly documented risk framework.
Gauntlet — risk management firm that also manages risk parameters for Aave. Deep protocol knowledge. More data-driven than yield-chasing.
RE7 Capital — higher-beta strategy, explicitly targeting higher yields with more active allocation. Higher potential APY, higher exposure.
My personal split right now: 60% Steakhouse USDC, 40% sitting in T-bills via my brokerage while I wait for Aave to normalize. I’d rather earn 3.14% on the T-bill portion than have it inaccessible in a frozen pool.
That’s not a recommendation. It’s just what I’m doing.
The Risk Paragraph You Need to Read
Every option here carries real risk. Not theoretical risk — real risk.
Morpho’s additional smart contract layer means more surface area for exploits than Aave alone. Curator vaults add counterparty risk: if a curator makes bad allocation decisions, your yield suffers. Morpho’s TVL dropped 9.62% in the immediate aftermath of the Kelp exploit — even “uninvolved” protocols bleed in a panic.
Aave’s situation right now illustrates what liquidity risk actually looks like. Even if the contract is secure, you can be unable to access your money for days or weeks while governance scrambles.
Yield-bearing stablecoins like USDe and USDY carry their own structural risks (algorithmic backing, oracle dependencies, regulatory exposure).
None of these are savings accounts. None of these are FDIC insured. 6% APY in DeFi is not the same as 6% APY at a bank.
Where I’d Put $10,000 in Stablecoins Right Now
This is a hypothetical allocation to illustrate the tradeoffs. Not a portfolio recommendation.
- $4,000 — Morpho (Steakhouse USDC vault, Ethereum): Functioning liquidity, ~5-6% APY, conservative curator
- $3,000 — T-bills / brokerage money market: ~3.14% risk-free floor (Interactive Brokers, Fidelity, etc.)
- $2,000 — USDe (Ethena): ~8-10% estimated APY, higher risk, fully separate protocol risk profile
- $1,000 — ETH staking (Lido stETH): ~2.4% APY, exposure to ETH appreciation, liquid
Total blended yield estimate: roughly 5-6%. Fully diversified across protocol risks. No single point of failure.
Confession: I had more in Aave than I intended. I’ve been slowly rebalancing since Saturday. Real mistakes, real numbers.
Frequently Asked Questions
What is the best stablecoin yield in 2026 right now? As of April 25, 2026, Morpho curated USDC vaults (Steakhouse, Gauntlet) are offering approximately 5-7% APY and have functioning liquidity. Aave V3 Ethereum USDC is in crisis mode (99.87% utilization). For a lower-risk floor, T-bills are yielding approximately 3.14%. APY fluctuates.
Is Aave safe after the Kelp hack? Aave’s smart contracts were not affected by the Kelp hack. The problem is downstream liquidity: the exploit triggered a borrowing surge that drained available USDC. Aave is structurally secure but functionally strained right now.
What is Morpho’s TVL? Morpho held $7.67 billion in TVL as of April 2026 (source: DeFiLlama), making it the second-largest DeFi lending protocol.
Will Aave USDC rates go up? Circle proposed emergency governance changes on April 22, 2026 that could push maximum USDC supply rates as high as 48% to attract new deposits. If the proposal passes, Aave USDC could temporarily become a very high-yield option — but also an unusually volatile one.
How do I access Morpho vaults? Go to app.morpho.org, connect your wallet, select “Vaults,” filter by USDC, and look for Steakhouse or Gauntlet curator vaults. You’ll need ETH for gas.
Start Trading on Platforms That Support DeFi Access
If you’re moving assets around in response to yield shifts, you need an exchange that gives you easy on/off ramps and deep liquidity.
OKX — Solid on-chain integration, competitive stablecoin trading fees, and a Web3 wallet built in. My main ramp for USDC moves.
Bybit — Strong for asset transfers and fast USDC on-chain withdrawal. Reliable when you need to move fast.
The Bottom Line
The Kelp hack didn’t just lose $292 million in rsETH. It stress-tested the entire USDC lending ecosystem and exposed exactly which protocols are built for resilience and which ones get jammed. For a broader look at safe DeFi yield options, see DeFi Yield Safe Alternatives After KelpDAO Hack 2026.
Morpho’s curated vault model came out looking better than Aave’s pooled model right now. Not because Aave is broken — it isn’t — but because pool mechanics can fail under concentrated borrowing pressure. Morpho’s architecture distributes that risk differently.
If you’re holding stablecoins and want yield in April 2026: check Morpho first, watch Aave for when the Circle proposal passes, and keep a T-bill allocation as your baseline.
Passive income isn’t lazy money — it’s freedom money. But freedom money requires you to actually understand where it’s sitting.
Disclaimer: This article represents my personal research and portfolio decisions. It is not financial advice. All APY figures are approximate, sourced from publicly available data, and fluctuate with market conditions. DeFi protocols carry smart contract risk, liquidity risk, and curator risk. Never invest more than you can afford to lose.
Sources: CoinDesk (April 7, 2026 — DeFi yields article); CoinDesk (April 19-21, 2026 — Kelp DAO exploit coverage); The Block (April 23, 2026 — Circle Aave proposal); CryptoTimes (April 23, 2026 — Aave utilization); DeFiLlama (Morpho TVL); Cointelegraph (Fireblocks Morpho integration). APY data as of April 25, 2026.
Join the Discussion