Spark Protocol’s rate limits turned a $294M exploit into a growth story

A compromised bridge drained nearly $294 million in unbacked rsETH from KelpDAO on April 18. Most DeFi lending protocols scrambled. SparkLend, run by CEO Sam MacPherson, barely flinched. The reason comes down to something unsexy but effective: rate limits. SparkLend had pre-built caps on how much capital could flow in or out during any given period, a mechanism designed specifically for moments like this one. Those guardrails, combined with reduced rsETH exposure and an oracle killswitch, meant the protocol avoided material losses entirely while competitors watched their balance sheets catch fire. What happened with KelpDAO The exploit targeted a LayerZero bridge connected to KelpDAO, siphoning approximately 116,500 rsETH. At the time, that stash was worth between $292 million and $294 million. Aave, the largest decentralized lending protocol by most measures, was holding substantial rsETH positions when the exploit hit. The result was roughly $195 million in bad debt from unbacked collateral. Aave was forced to freeze markets as a reactive measure, and its total value locked took a sharp hit before partially recovering. SparkLend, by contrast, had already lowered its rsETH exposur...