In response to a $292 million exploit that has left a substantial gap in collateral, Aave and several prominent crypto firms have initiated a collaborative effort to stabilize the decentralized finance (DeFi) market. This endeavor, known as 'DeFi United,' is led by Aave service providers and aims to restore the backing of rsETH, a yield-bearing derivative token of ether (ETH) central to the exploit.
Aave has announced that multiple participants have already pledged their support for this initiative. Lido Finance, a staking provider, was among the first to contribute, with its ecosystem contributor, Lido Labs Foundation, proposing to allocate up to 2,500 stETH (approximately $5.7 million at current prices) into a dedicated relief fund. The primary objective of these funds is to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets. Following this, EtherFi proposed a plan involving 5,000 ETH to 'protect users and prevent bad debt' across DeFi.
Stani Kulechov, the founder of Aave, also offered a 5,000 ETH contribution, stating, 'Aave is my life's work, and we are working tirelessly to find the best possible outcome for our users.' He emphasized his commitment to resolving the issue and normalizing market conditions as soon as possible. Aave plans to announce additional commitments as they are formalized. This initiative follows the largest crypto exploit of the year, which significantly impacted DeFi lending markets.
The exploit was traced back to a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens. Instead of selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This led to impaired collateral on Aave, triggering a rush of withdrawals as lenders sought to access available funds, resulting in a $10 billion decline in the total value of assets on Aave. According to Aave's incident report, the total shortfall is estimated to be over 112,000 rsETH.
Prior to the DeFi United initiative, there were early containment efforts, including Arbitrum's security council freezing 30,766 ETH (worth roughly $71 million at the time) linked to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating the recovery process. The current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.