KAVA Crashes 40% After Suspicious Activity in Kava Lend

KAVA plunged more than 40% during November 14 trading after the Kava team flagged suspicious activity involving its Kava Lend protocol. The incident involved unusual token movements, with approximately 48.36 million KAVA, worth around $3.3 million, reportedly transferred from Kava to BNB Chain and partially sold.

The development prompted South Korean cryptocurrency exchanges Upbit and Bithumb to suspend KAVA deposits and withdrawals as a precaution. Coinone also announced a temporary suspension, adding to concerns among traders.

Kava said the incident originated in Kava Lend and was not caused by a vulnerability allowing unlimited token issuance. The team said it had taken steps to contain the issue and was investigating the activity.

48.36 Million KAVA Tokens Reportedly Moved to BNB Chain

The incident came to light after blockchain observers flagged an unusual movement of KAVA tokens from the Kava network to BNB Chain.

According to on-chain reports, approximately 48.36 million KAVA tokens were transferred, representing around $3.3 million at the time. Some of the tokens were reportedly swapped through a decentralized exchange in batches of approximately 100,000 KAVA.

One report indicated that the wallet involved still held around 47.96 million KAVA after the initial transactions. However, the wallet activity and the exact amount sold have not been independently confirmed by Kava.

The project's statement identified Kava Lend as the source of the abnormal activity. It did not provide a complete technical explanation of how the transactions occurred or confirm the final financial impact.

Kava Says Incident Was Not an Infinite Mint

Kava addressed concerns about the incident in a November 14 statement. The team said the abnormal activity involved KAVA tokens moving to BNB Chain and being sold, but denied that the issue resulted from an error allowing unlimited token creation.

The team identified Kava Lend, its decentralized lending application, as the affected area. It also said measures had been taken to prevent the problem from spreading to other services.

This distinction matters because an infinite mint vulnerability could allow an attacker to create an unlimited supply of unbacked tokens, potentially causing much greater damage to holders. Kava's statement indicates that this was not the mechanism behind the reported incident.

However, the team has yet to publish a detailed technical explanation or a complete account of the affected funds. The exact vulnerability, the wallet responsible, and the full extent of the incident remain unclear.

Upbit and Bithumb Suspend KAVA Deposits and Withdrawals

South Korean exchanges responded by temporarily restricting KAVA transfers.

Upbit and Bithumb suspended deposits and withdrawals to protect users while the security situation was being reviewed. Coinone also announced a temporary suspension for the same reason.

Upbit additionally placed KAVA on its trading caution watchlist after identifying signs of a suspected security issue involving the network.

These restrictions do not necessarily mean that users cannot trade KAVA on the exchanges. Deposit and withdrawal suspensions are separate from trading restrictions, and each exchange can announce additional measures independently.

The exchanges have not provided a confirmed timeline for restoring normal transfer services. Users should check the latest exchange announcements before attempting to deposit or withdraw KAVA.

KAVA Price Drops More Than 40%

The incident triggered a sharp reaction in the market. KAVA fell more than 40% at its intraday low, with prices briefly approaching the 0.036 - 0.04 range.

Market snapshots varied as the token traded through the sell-off. One November 14 report recorded KAVA at approximately $0.0516, down 24.57% at the time of that update.

The price movement reflects uncertainty surrounding the incident, as traders reacted to the unusual token transfers, exchange restrictions, and the possibility of further selling.

The situation also highlights how quickly confidence can deteriorate when a DeFi protocol reports suspicious activity. Even before a full technical explanation becomes available, concerns about user funds and token supply can trigger significant selling.

How the Kava Incident Fits Into Crypto's Wider Security Risks

The Kava incident adds to a difficult year for decentralized finance security. Lending protocols, bridges, and other applications remain exposed to vulnerabilities that can affect users even when the underlying blockchain continues operating.

Altcoin Buzz recently covered a lending-protocol incident involving Nostra on Starknet, where an oracle-related issue allowed an attacker to borrow assets against incorrectly priced collateral.

In another recent case, Across Protocol restored its website after a phishing attack. That incident involved a compromised website rather than an exploit of the bridge's smart contracts, illustrating how security problems can affect different parts of a DeFi ecosystem.

Altcoin Buzz also examined the wider scale of crypto security losses in 2026, including incidents involving lending protocols and cross-chain infrastructure.

These cases have different causes and should not be treated as related attacks. However, they show why users need to understand which application, contract, or infrastructure component is affected when a security incident occurs.

What Happens Next for Kava?

The immediate priority is a detailed explanation from the Kava team. Users and investors will be looking for information about the affected contracts, the origin of the suspicious transactions, and whether any user funds were lost.

The team also needs to clarify whether additional security measures or changes to Kava Lend are required before normal operations resume.

For KAVA holders, exchange restrictions and price volatility remain important concerns. Upbit, Bithumb, and Coinone will need to confirm network safety before restoring deposits and withdrawals.

For now, Kava says the issue has been contained and is not an infinite mint. But until the team publishes its investigation findings, the full impact of the incident remains uncertain.