In response to a $292 million exploit that has left a significant gap in collateral backing, Aave and several prominent cryptocurrency firms are collaborating on a recovery initiative to stabilize decentralized finance (DeFi) markets. The effort, known as "DeFi United" and spearheaded by Aave service providers, aims to restore the backing of rsETH, a yield-bearing ether (ETH) derivative token at the center of the exploit. Aave has announced that multiple participants have already committed to supporting the initiative, with staking provider Lido Finance being among the first to offer aid, proposing to allocate up to 2,500 stETH (worth approximately $5.7 million at current prices) into a dedicated relief fund.
This would help reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets. EtherFi has also proposed a 5,000 ETH plan to protect users and prevent bad debt across DeFi, while Aave founder Stani Kulechov has pledged a 5,000 ETH contribution. According to Kulechov, "Aave is my life's work, and we are working tirelessly to find the best possible outcome for users. I am committed to resolving this issue and normalizing market conditions as soon as possible." The initiative follows the largest crypto exploit of the year, which has sent shockwaves through DeFi lending markets.
The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens by exploiting the bridge's messaging system. Instead of selling the tokens, the attacker used nearly 90,000 rsETH as collateral to borrow approximately $190 million in ETH and other assets across Ethereum and Arbitrum, leaving Aave with impaired collateral and triggering a rush of deposit withdrawals. The total value of assets on Aave plummeted by $10 billion in the aftermath of the incident.
With an estimated total shortfall of over 112,000 rsETH, according to Aave's incident report, the current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.