In the aftermath of a $292 million exploit, Aave and several prominent cryptocurrency firms have initiated a collaborative recovery effort aimed at stabilizing the decentralized finance (DeFi) market. The exploit has resulted in a substantial shortfall in collateral backing, prompting a major response from the sector. Dubbed the 'DeFi United' initiative, the effort is led by Aave service providers and focuses on restoring the backing of rsETH, a yield-bearing derivative token of ether (ETH) central to the exploit.
Aave has announced that multiple participants have already committed to supporting this endeavor. Lido Finance, a staking provider, was among the first to offer aid, with its ecosystem contributor, Lido Labs Foundation, proposing to allocate up to 2,500 stETH (worth approximately $5.7 million) into a dedicated relief fund. The primary objective of these funds is to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets.
Following Lido's lead, EtherFi proposed a plan involving 5,000 ETH to safeguard users and avert bad debt across DeFi. Stani Kulechov, the founder of Aave, also pledged 5,000 ETH towards the recovery effort.
Kulechov emphasized his commitment to finding the best possible solution for users, stating, 'Aave is my life's work, and we are working tirelessly to resolve this situation and normalize market conditions as soon as possible.' Aave intends to announce additional commitments as they are formalized. The DeFi United initiative is a direct response to the largest cryptocurrency exploit of the year, which has sent shockwaves through DeFi lending markets.
The incident originated from a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens. Rather than selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum.
This resulted in Aave having impaired collateral, triggering a rush of deposit withdrawals and a $10 billion plunge in the total value of assets on the platform. According to Aave's incident report, the total shortfall is estimated to be over 112,000 rsETH. Prior to the DeFi United initiative, there were early attempts at containment, including Arbitrum's security council freezing 30,766 ETH (worth roughly $71 million at the time) linked to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating the recovery process.
The current effort prioritizes stabilizing the system through a coordinated bailout, focusing on recapitalizing rsETH and mitigating losses rather than recovering the stolen funds.