In the aftermath of a $292 million exploit, Aave and several prominent crypto companies have come together to initiate a recovery effort aimed at stabilizing the decentralized finance (DeFi) markets. The collaborative initiative, known as 'DeFi United', is led by Aave service providers and focuses on restoring the collateral backing of rsETH, a yield-bearing derivative token of ether (ETH), which was at the center of the exploit.
Multiple participants have already indicated their commitment to supporting the effort, according to a post by Aave on X. Lido Finance, a staking provider, was among the first to offer aid, with its ecosystem contributor Lido Labs Foundation proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, into a dedicated relief fund. The funds are intended to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets.
This was followed by EtherFi's proposal of a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi. Aave's founder, Stani Kulechov, also pledged a 5,000 ETH contribution, stating that 'Aave is my life's work and we're working nonstop to find the best possible outcome for users' in an X post.
He emphasized his commitment to resolving the issue and normalizing market conditions as soon as possible. Aave plans to announce additional commitments once they are formalized. The initiative comes in response to the largest crypto exploit of the year, which has sent shockwaves through DeFi lending markets.
The incident is attributed to a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens. Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This left Aave with impaired collateral, triggering a rush of deposit withdrawals as lenders sought to access available funds, resulting in a $10 billion plunge in the total value of assets on Aave.
The estimated total shortfall is over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, there were early containment efforts, including Arbitrum's security council freezing 30,766 ETH, worth roughly $71 million, tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating recovery efforts. The current initiative prioritizes stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than focusing on recovering the stolen funds.