In the aftermath of a devastating $292 million exploit, Aave has joined forces with several prominent cryptocurrency firms to launch a coordinated recovery effort aimed at stabilizing the decentralized finance (DeFi) market. The goal of this initiative, dubbed 'DeFi United', is to restore the collateral backing of rsETH, a yield-bearing ether (ETH) derivative token that was at the center of the exploit. Aave has announced that multiple participants have already committed to supporting the effort, with staking provider Lido Finance being among the first to pledge aid.
Lido's ecosystem contributor, Lido Labs Foundation, has proposed allocating up to 2,500 stETH (worth approximately $5.7 million at current prices) to a dedicated relief fund. This fund will be used to reduce the shortfall in rsETH backing and help prevent forced liquidations across lending markets. EtherFi has also proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, while Aave founder Stani Kulechov has personally offered a 5,000 ETH contribution.
According to Kulechov, 'Aave is my life's work, and we're working tirelessly to find the best possible outcome for users.' The initiative comes in response to the biggest crypto exploit of the year, which has sent shockwaves through DeFi lending markets. The incident was triggered by a vulnerability in KelpDAO's integration with LayerZero, which allowed an attacker to mint 116,500 unbacked rsETH tokens by exploiting the bridge's messaging system.
Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing around $190 million in ETH and other assets across Ethereum and Arbitrum. This left Aave with impaired collateral, triggering a rush of deposit withdrawals as lenders sought to withdraw available funds. The total value of assets on Aave plummeted by $10 billion in the aftermath of the incident.
The estimated total shortfall is over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, there were some early efforts to contain the damage. Earlier this week, Arbitrum's security council froze 30,766 ETH (worth roughly $71 million at the time) tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more complex.
The current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.