In response to a $292 million exploit that has left a significant gap in collateral, Aave and several prominent crypto firms have joined forces to launch a stabilization effort aimed at restoring the integrity of decentralized finance (DeFi) markets. The collaborative initiative, known as "DeFi United", is specifically designed to rebuild the backing of rsETH, a yield-bearing derivative token of ether (ETH) that was at the center of the exploit.
Aave has announced that multiple participants have already committed to supporting this effort, with staking provider Lido Finance and its ecosystem contributor, Lido Labs Foundation, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund. This allocation is intended to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets.
Additionally, EtherFi has proposed a plan involving 5,000 ETH to safeguard users and avert bad debt across DeFi, while Stani Kulechov, Aave's founder, has pledged a 5,000 ETH contribution. Kulechov emphasized his dedication to finding the best possible outcome for users, stating, "Aave is my life's work, and we are working tirelessly to resolve this situation and normalize market conditions as soon as possible." Further commitments are expected to be announced once formalized. The DeFi United initiative follows the largest crypto exploit of the year, which sent shockwaves through DeFi lending markets. The incident originated from a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens.
Instead of selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This resulted in impaired collateral for Aave, triggering a rush of deposit withdrawals and a $10 billion decline in the total value of assets on the platform.
According to Aave's incident report, the estimated total shortfall exceeds 112,000 rsETH. Prior to the launch of DeFi United, there were initial efforts to contain the damage, including Arbitrum's security council freezing 30,766 ETH, valued at roughly $71 million, linked to the exploit. However, the remaining stolen funds were transferred and swapped into bitcoin via Thorchain, complicating recovery efforts. The current focus of DeFi United is on stabilizing the system through a coordinated bailout, aimed at recapitalizing rsETH and mitigating losses, rather than attempting to recover the stolen funds.