Aave and several prominent cryptocurrency firms have joined forces to launch a recovery initiative aimed at stabilizing the decentralized finance (DeFi) market, following a $292 million exploit that left a significant shortfall in collateral backing for the sector's largest lender. The collaborative effort, known as 'DeFi United', is focused on restoring the backing of rsETH, a yield-bearing derivative token of ether (ETH) that was at the center of the exploit.
Aave announced that multiple participants have already committed to supporting the initiative, with staking provider Lido Finance being the first to offer aid, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, into a dedicated relief fund. This was followed by EtherFi's proposal of a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, and Aave founder Stani Kulechov's personal contribution of 5,000 ETH. According to Kulechov, 'Aave is my life's work and we're working tirelessly to find the best possible outcome for users. I'm working to see this resolved and market conditions normalized as soon as possible.' Aave plans to announce additional commitments as they are formalized.
The initiative comes in response to the largest crypto exploit of the year, which sent shockwaves through DeFi lending markets. The incident was caused by a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens by exploiting the bridge's messaging system. Instead of selling the tokens, the attacker used nearly 90,000 rsETH as collateral to borrow approximately $190 million in ETH and other assets across Ethereum and Arbitrum, leaving Aave with impaired collateral and triggering a rush of deposit withdrawals. The total value of assets on Aave plummeted by $10 billion following the incident, with an estimated shortfall of over 112,000 rsETH, according to Aave's incident report.
Prior to the DeFi United initiative, there were some initial containment efforts, including Arbitrum's security council freezing 30,766 ETH, worth roughly $71 million, tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more complex.
The current effort prioritizes stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.