In response to a $292 million exploit that has significantly impacted the decentralized finance sector, Aave and several prominent cryptocurrency companies are working together to coordinate a recovery effort aimed at stabilizing DeFi markets. The initiative, known as 'DeFi United', is focused on restoring the collateral backing of rsETH, a yield-bearing ether derivative token central to the exploit. Aave has announced that multiple participants have already committed to supporting the effort, with Lido Finance's ecosystem contributor, Lido Labs Foundation, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, into a dedicated relief fund.
This allocation is intended to reduce the shortfall in rsETH backing and help prevent forced liquidations across lending markets. EtherFi has also proposed a plan involving 5,000 ETH to protect users and prevent bad debt across DeFi, while Stani Kulechov, founder of Aave, has pledged a 5,000 ETH contribution.
Kulechov emphasized his commitment to finding the best possible outcome for users, stating, 'Aave is my life's work, and we are working tirelessly to resolve this issue and normalize market conditions as soon as possible.' Aave plans to announce additional commitments once they are formalized. The DeFi United initiative follows the largest crypto exploit of the year, which has sent ripples across DeFi lending markets.
The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens. Instead of selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets. This resulted in impaired collateral on Aave, triggering a rush of withdrawals by lenders and a $10 billion decline in the total value of assets on the platform.
The estimated total shortfall is over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, there were initial containment efforts, including Arbitrum's security council freezing 30,766 ETH tied to the exploit. However, the remainder of the stolen funds were transferred and swapped into bitcoin via Thorchain, complicating recovery efforts.
The current focus is on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.