In the aftermath of a $292 million exploit, Aave and several prominent cryptocurrency firms have come together to coordinate a recovery effort aimed at stabilizing the decentralized finance (DeFi) market. The collaborative initiative, dubbed 'DeFi United', seeks to restore the collateral backing of rsETH, a yield-bearing derivative token of ether (ETH) that is at the center of the exploit. Aave has announced that multiple participants have already pledged their support for the effort, with staking provider Lido Finance being among the first to commit, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, into a dedicated relief fund. This allocation is intended to reduce the shortfall in rsETH backing and help prevent forced liquidations across lending markets.
Furthermore, EtherFi has proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, while Stani Kulechov, Aave's founder, has also offered a 5,000 ETH contribution to support the recovery efforts. According to Kulechov, 'Aave is my life's work, and we are working tirelessly to find the best possible outcome for our users.' He emphasized his commitment to resolving the issue and normalizing market conditions as soon as possible. Aave plans to announce additional commitments once they have been formalized.
The DeFi United initiative comes in response to the largest cryptocurrency exploit of the year, which has sent shockwaves through DeFi lending markets. The incident is attributed to a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens. Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This has resulted in Aave having impaired collateral, triggering a rush of deposit withdrawals as lenders sought to access available funds.
The total value of assets on Aave plummeted by $10 billion following the incident, with the estimated total shortfall exceeding 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, there were some initial containment efforts, including Arbitrum's security council freezing 30,766 ETH, valued at roughly $71 million, tied to the exploit. However, the majority of the stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more complex.
The current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.