In the aftermath of a $292 million exploit, Aave and several prominent cryptocurrency firms have banded together to launch a stabilization effort aimed at restoring confidence in decentralized finance (DeFi) markets. The collaborative initiative, known as 'DeFi United', is spearheaded by Aave service providers and focuses on replenishing the collateral backing of rsETH, a yield-bearing ether (ETH) derivative token at the center of the exploit. Aave has announced that multiple participants have already committed to supporting the effort, with Lido Finance's ecosystem contributor, Lido Labs Foundation, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund.
This allocation is intended to reduce the shortfall in rsETH backing and prevent forced liquidations across lending platforms. EtherFi has also proposed a 5,000 ETH plan to safeguard users and avert bad debt across DeFi. Aave's founder, Stani Kulechov, has pledged a 5,000 ETH contribution, stating, 'Aave is my life's work, and we are working tirelessly to achieve the best possible outcome for our users.' The initiative follows the largest crypto exploit of the year, which sent shockwaves through DeFi lending markets. The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens by exploiting the bridge's messaging system.
Instead of selling the tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This left Aave with impaired collateral, triggering a rush of withdrawals as lenders sought to access available funds, resulting in a $10 billion decline in the total value of assets on Aave.
The total shortfall is estimated to be over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, some early containment efforts were made, including Arbitrum's security council freezing 30,766 ETH, worth roughly $71 million, tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating recovery efforts. The current initiative prioritizes system stabilization through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than focusing on recovering the stolen funds.