Aave and several prominent cryptocurrency firms have launched a collaborative effort, dubbed 'DeFi United', to stabilize the decentralized finance (DeFi) market following a $292 million exploit that left a significant collateral shortfall in the sector's largest lender. The initiative aims to restore the backing of rsETH, a yield-bearing ether (ETH) derivative token at the center of the exploit. Aave has announced that multiple participants have already committed to supporting the effort, with Lido Finance's ecosystem contributor, Lido Labs Foundation, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund. This would help reduce the rsETH backing shortfall and prevent forced liquidations across lending markets.
EtherFi has also proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, while Aave's founder, Stani Kulechov, has pledged a 5,000 ETH contribution. 'Aave is my life's work, and we are working tirelessly to find the best possible outcome for users,' Kulechov stated. 'I am committed to resolving this issue and normalizing market conditions as soon as possible.' The initiative follows the largest crypto exploit of the year, which sent shockwaves through DeFi lending markets.
The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens. Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing around $190 million in ETH and other assets across Ethereum and Arbitrum. This left Aave with impaired collateral, triggering a rush of deposit withdrawals and a $10 billion plunge in the total value of assets on the platform.
The estimated total shortfall is over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, there were some early containment efforts, including Arbitrum's security council freezing 30,766 ETH, worth approximately $71 million, tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more complex.
The current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.