Aave and several major cryptocurrency companies are collaborating on a recovery effort to stabilize the decentralized finance (DeFi) market after a $292 million exploit left the sector's largest lender facing a significant shortfall in collateral backing. The initiative, known as 'DeFi United' and led by Aave service providers, aims to restore the backing of rsETH, a yield-bearing derivative token of ether (ETH), at the center of the exploit. Aave announced that multiple participants have already committed to supporting the effort. Lido Finance, a staking provider, was the first to offer aid, with its ecosystem contributor Lido Labs Foundation proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, into a dedicated relief fund.
The funds will be used to reduce the shortfall in rsETH backing and help prevent forced liquidations across lending markets. This was followed by EtherFi's proposal of a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi. Stani Kulechov, founder of Aave, also offered a 5,000 ETH contribution, stating, 'Aave is my life's work, and we're working tirelessly to find the best possible outcome for users.' Aave plans to announce more commitments once they are formalized.
The initiative comes after the largest crypto exploit of the year sent shockwaves through DeFi lending markets. The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, where an attacker minted 116,500 unbacked rsETH tokens by exploiting the bridge's messaging system. Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum.
This left Aave with impaired collateral, triggering a rush of deposit withdrawals as lenders sought to retrieve available funds. The total value of assets on Aave plummeted by $10 billion following the incident. The total shortfall is estimated to be over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, there were some early containment efforts, including Arbitrum's security council freezing 30,766 ETH, worth roughly $71 million, tied to the exploit.
However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more complex. The current effort focuses on stabilizing the system with a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.