In the aftermath of a $292 million exploit that has left a significant gap in collateral backing, Aave and several prominent cryptocurrency firms are collaborating on a recovery effort to stabilize decentralized finance (DeFi) markets. The initiative, known as 'DeFi United' and led by Aave service providers, aims to restore the backing of rsETH, a yield-bearing derivative token of ether (ETH) that is central to the exploit. Aave has announced that multiple participants have already committed to supporting the effort, with staking provider Lido Finance being among the first to offer aid, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, into a dedicated relief fund. This will be used to reduce the shortfall in rsETH backing and help prevent forced liquidations across lending markets.
Following Lido's lead, EtherFi has proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, while Stani Kulechov, founder of Aave, has also pledged a 5,000 ETH contribution. Kulechov emphasized that 'Aave is my life's work and we're working nonstop to find the best possible outcome for users,' stating that he is 'working to see this resolved and market conditions normalized as soon as possible.' Aave plans to announce additional commitments once they have been formalized. The initiative comes in response to the largest crypto exploit of the year, which has sent shockwaves through DeFi lending markets. The incident is attributed to a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens.
Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This has left Aave with impaired collateral, triggering a rush of withdrawals as lenders seek to retrieve available funds, resulting in a $10 billion plunge in the total value of assets on Aave.
The total shortfall is estimated to be over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, there have been some early containment efforts, including Arbitrum's security council freezing 30,766 ETH, worth roughly $71 million, tied to the exploit.
However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more complex. The current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.