Aave Unites DeFi Partners to Mitigate $292 Million KelpDAO Exploit Fallout

In the aftermath of a $292 million exploit that left a significant collateral shortfall, Aave and major cryptocurrency firms are joining forces to stabilize the decentralized finance (DeFi) market. The collaborative effort, known as 'DeFi United', aims to restore the backing of rsETH, a yield-bearing ether (ETH) derivative token at the center of the exploit. Aave has announced that multiple participants have already committed to supporting the initiative, with staking provider Lido Finance and EtherFi being among the first to offer aid.

Lido Labs Foundation has proposed allocating up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund, while EtherFi has suggested a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi. Aave founder Stani Kulechov has also pledged 5,000 ETH, stating that 'Aave is my life's work and we're working nonstop to find the best possible outcome for users.' The initiative follows the largest cryptocurrency exploit of the year, which has had far-reaching implications for DeFi lending markets.

The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens. Instead of selling the tokens, the attacker used them as collateral on Aave, borrowing around $190 million in ETH and other assets. This resulted in impaired collateral, triggering a rush of withdrawals and a $10 billion decline in Aave's total asset value. The total shortfall is estimated to be over 112,000 rsETH, according to Aave's incident report.

Prior to the DeFi United initiative, some early containment efforts were made, including the freezing of 30,766 ETH (worth approximately $71 million) by Arbitrum's security council. However, the majority of the stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more challenging.

The current effort focuses on stabilizing the system through a coordinated bailout, aiming to recapitalize rsETH and mitigate losses rather than retrieving the stolen funds.