In the aftermath of a $292 million exploit, Aave and several prominent crypto firms have initiated a collaborative recovery effort to stabilize the decentralized finance (DeFi) market. The initiative, dubbed 'DeFi United', aims to restore the collateral backing of rsETH, a yield-bearing derivative token of ether (ETH), which was at the center of the exploit. Aave has announced that multiple participants have already committed to supporting the effort, with staking provider Lido Finance being among the first to propose a plan to allocate up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund. This would help reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets.
EtherFi has also proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi. Aave's founder, Stani Kulechov, has pledged a 5,000 ETH contribution, stating that 'Aave is my life's work and we're working nonstop to find the best possible outcome for users.' The initiative comes in response to the largest crypto exploit of the year, which has sent shockwaves through DeFi lending markets.
The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens. The attacker then deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets. This has left Aave with impaired collateral, triggering a run on deposits and a $10 billion plunge in the total value of assets on the platform. The total hole is estimated to be over 112,000 rsETH, according to Aave's incident report.
Prior to the DeFi United initiative, there have been some early containment efforts, including the freezing of 30,766 ETH by Arbitrum's security council. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more complex. The current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.