In the aftermath of a $292 million exploit, Aave and several prominent cryptocurrency firms have come together to orchestrate a recovery effort aimed at stabilizing the decentralized finance (DeFi) market. The initiative, known as 'DeFi United' and spearheaded by Aave service providers, seeks to replenish the collateral backing of rsETH, a yield-bearing derivative token of ether (ETH) that was at the center of the exploit.
Aave has announced that multiple participants have already committed to supporting this effort. Lido Finance, a staking provider, was among the first to offer aid, with its ecosystem contributor, Lido Labs Foundation, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, into a dedicated relief fund. The primary objective of these funds is to mitigate the shortfall in rsETH backing and prevent forced liquidations across lending markets.
Following this, EtherFi proposed a plan involving 5,000 ETH to protect users and prevent bad debt across DeFi. Stani Kulechov, the founder of Aave, also pledged a 5,000 ETH contribution. In a statement, Kulechov expressed his commitment to finding the best possible outcome for users, stating, 'Aave is my life's work, and we are working tirelessly to resolve this and normalize market conditions as soon as possible.' Aave plans to announce additional commitments as they are formalized. This initiative comes on the heels of the year's largest crypto exploit, which has sent shockwaves through DeFi lending markets.
The exploit was made possible by a vulnerability in KelpDAO's integration with LayerZero, where an attacker was able to mint 116,500 unbacked rsETH tokens by exploiting the bridge's messaging system. Rather than immediately selling these tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This left Aave with significantly impaired collateral, triggering a rush of deposit withdrawals as lenders sought to secure available funds. The total value of assets on Aave plummeted by $10 billion in the wake of the incident.
According to Aave's incident report, the total shortfall is estimated to exceed 112,000 rsETH. Prior to the launch of the DeFi United initiative, there were initial efforts to contain the damage. Earlier in the week, Arbitrum's security council froze 30,766 ETH, worth roughly $71 million at the time, that was tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating recovery efforts.
The current focus of the DeFi United initiative is on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than solely on recovering the stolen funds.