Crypto Coalition Unveils Plan to Mitigate Aave Token Exploit

Unlike typical scenarios involving massive financial shortfalls, a potential repair strategy has been outlined. DeFi United, a coalition of multiple blockchain projects and crypto ecosystem individuals, has devised a detailed, step-by-step plan to reestablish the backing of rsETH following this month’s Kelp DAO hack, which sent shockwaves through DeFi lending markets and released over 116,000 unaccounted-for tokens. The proposal, shared on Aave’s official X account, resembles a coordinated effort to utilize Aave’s infrastructure and stabilize the markets. The incident began on April 18 when an attacker exploited a vulnerability in rsETH’s bridge, creating 116,500 rsETH without backing by forging a message that appeared legitimate. Those tokens were not idle; they were dispersed across multiple wallets and used across DeFi, with a significant portion utilized as collateral on Aave and other lending platforms. This created a systemic issue, as protocols like Aave found themselves holding unbacked collateral. According to the proposal, most of the exploited funds remain in active positions across Aave and Compound, totaling approximately 107,000 of the original 116,500 rsETH. DeFi United’s proposal aims to address the dual issues of restoring rsETH backing and unwinding the loans created using the extra tokens. The group claims to have secured sufficient ETH commitments to fully re-collateralize rsETH and plans to feed that ETH back into the system in stages. Concurrently, the proposal focuses on the lending markets where the damage is most visible. Instead of allowing the situation to unfold chaotically, the plan involves carefully unwinding the mess, particularly the positions the attacker opened on Aave. These loans, backed by rsETH that shouldn’t have existed, will be closed out in a more controlled manner by temporarily adjusting rsETH’s valuation inside the system. As these positions are unwound, the underlying assets can be recovered, potentially freeing up around 13,000 ETH from Aave alone. This collateral will then be converted into ETH and used to cover the shortfall created by the exploit. Although the process carries risks, including governance approvals and the successful deployment of committed funds, the plan represents a more coordinated response than DeFi has often managed previously. If executed as intended, the goal is to fully restore rsETH backing and stabilize all affected markets.