In the wake of a devastating $292 million exploit, Aave and several prominent cryptocurrency firms have launched a collaborative recovery effort to stabilize the decentralized finance (DeFi) market. The initiative, dubbed 'DeFi United', aims to restore the collateral backing of rsETH, a yield-bearing ether (ETH) derivative token at the center of the exploit.
Aave announced that multiple participants have already pledged their support for the effort. Lido Finance's ecosystem contributor, Lido Labs Foundation, was the first to offer aid, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund.
The funds will be utilized to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets. This was followed by EtherFi's proposal of a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi. Aave's founder, Stani Kulechov, also contributed 5,000 ETH, stating that 'Aave is my life's work and we're working tirelessly to find the best possible outcome for users.' Kulechov added, 'I'm working to see this resolved and market conditions normalized as soon as possible.' Aave plans to announce additional commitments once they are formalized. The DeFi United initiative comes in response to the largest crypto exploit of the year, which has sent shockwaves through DeFi lending markets.
The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens. Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This left Aave with impaired collateral, triggering a rush of deposit withdrawals and a $10 billion plunge in the platform's total asset value.
The estimated total shortfall is over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, there were some early containment efforts, including Arbitrum's security council freezing 30,766 ETH, worth roughly $71 million, tied to the exploit.
However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating the recovery process. The current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.