Crypto Coalition Unveils Plan to Mitigate Aave Token Exploit

A $300 million deficit typically doesn't come with a straightforward repair guide. However, the group driving the Kelp DAO recovery effort is attempting to create one. DeFi United, an alliance of multiple blockchain projects and crypto ecosystem individuals, has outlined a detailed, step-by-step strategy to re-establish the backing of rsETH following this month's Kelp DAO hack, which sent shockwaves through DeFi lending markets after releasing over 116,000 unaccounted tokens. The proposal, shared on Aave's official X account, resembles a coordinated cleanup operation, relying heavily on Aave's infrastructure to rectify the damage and stabilize markets. The incident originated on April 18, when an attacker exploited a vulnerability in rsETH's bridge, forging a message that appeared legitimate and tricking the Ethereum side into releasing 116,500 rsETH, creating a large batch of tokens without backing. These tokens were circulated across multiple wallets and deployed in DeFi, with a significant portion used as collateral on Aave and other lending platforms, leading to protocols like Aave holding collateral that wasn't fully backed. According to the proposal, most of the exploited funds remain active, with approximately 107,000 of the original 116,500 rsETH tied up in positions across Aave and Compound. DeFi United's proposal aims to address both the backing of rsETH and the unwinding of loans created using those extra tokens simultaneously. The group claims to have secured sufficient ETH commitments to fully re-collateralize rsETH, planning to feed that ETH back into the system in stages. Meanwhile, attention shifts to the lending markets, where the plan is to carefully unwind the mess, including dealing with the positions the attacker opened on Aave. Temporarily adjusting rsETH's valuation inside the system will enable those bad positions to be liquidated or closed more smoothly, potentially freeing up around 13,000 ETH from Aave alone. Once that collateral is recovered, it will be converted into ETH and used to cover the shortfall created by the exploit. The process hinges on governance approvals across multiple chains, the successful deployment of committed funds, and a smooth execution of the unwind. If executed as intended, the end goal is to fully restore rsETH backing and stabilize all affected markets.