In the aftermath of a $292 million exploit, Aave and several prominent cryptocurrency companies have come together to coordinate a recovery effort aimed at stabilizing the decentralized finance (DeFi) market. The collaborative initiative, known as 'DeFi United', is led by Aave service providers and focuses on restoring the collateral backing of rsETH, a yield-bearing derivative token of ether (ETH), which is at the center of the exploit. Aave has announced that multiple participants have already committed to supporting the effort, with staking provider Lido Finance being among the first to offer aid.
Lido Labs Foundation, an ecosystem contributor to Lido Finance, has proposed allocating up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund. The primary goal of the funds is to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets.
Following Lido's lead, EtherFi has proposed a plan involving 5,000 ETH to 'protect users and prevent bad debt' across the DeFi ecosystem. Aave's founder, Stani Kulechov, has also pledged 5,000 ETH to the cause, stating that 'Aave is my life's work and we're working nonstop to find the best possible outcome for users.' Kulechov expressed his commitment to resolving the issue and normalizing market conditions as soon as possible. Aave plans to announce additional commitments as they are formalized. The DeFi United initiative comes in response to the largest crypto exploit of the year, which has sent shockwaves through DeFi lending markets.
The incident originated from a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens by exploiting the bridge's messaging system. Instead of selling the tokens, the attacker used nearly 90,000 rsETH as collateral to borrow approximately $190 million in ETH and other assets across Ethereum and Arbitrum.
This resulted in Aave having impaired collateral, triggering a rush of withdrawals by lenders and a subsequent $10 billion plunge in the total value of assets on Aave. According to Aave's incident report, the total shortfall is estimated to be over 112,000 rsETH.
Prior to the DeFi United initiative, there were some early efforts to contain the damage. Arbitrum's security council froze 30,766 ETH, worth roughly $71 million, tied to the exploit.
However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating the recovery process. The current effort prioritizes stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than focusing on recovering the stolen funds.