In the aftermath of a $292 million exploit, Aave and several prominent cryptocurrency firms have joined forces to launch a recovery effort aimed at stabilizing the decentralized finance (DeFi) market. The initiative, known as 'DeFi United' and spearheaded by Aave service providers, seeks to restore the collateral backing of rsETH, a yield-bearing ether (ETH) derivative token at the center of the exploit.
Aave has announced that multiple participants have already pledged their support for the effort. Lido Finance, a staking provider, was among the first to commit, with its ecosystem contributor Lido Labs Foundation proposing to allocate up to 2,500 stETH (worth approximately $5.7 million at current prices) to a dedicated relief fund. The funds will be utilized to reduce the shortfall in rsETH backing and help prevent forced liquidations across lending markets.
This was followed by EtherFi's proposal of a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi. Stani Kulechov, Aave's founder, has also offered a 5,000 ETH contribution, stating, 'Aave is my life's work, and we're working tirelessly to find the best possible outcome for users.' Aave plans to announce additional commitments once they are formalized. The initiative comes in response to the year's largest crypto exploit, which has sent shockwaves through DeFi lending markets.
The incident originated from a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens. Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This left Aave with impaired collateral, triggering a rush of withdrawals as lenders sought to access available funds.
The total value of assets on Aave plummeted by $10 billion following the incident. According to Aave's incident report, the estimated total shortfall exceeds 112,000 rsETH. Prior to the DeFi United initiative, some early containment efforts had been made. Arbitrum's security council had frozen 30,766 ETH (worth roughly $71 million at the time) linked to the exploit.
However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating the recovery process. The current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.