In the aftermath of a $292 million exploit, Aave and several prominent crypto firms have initiated a collaborative recovery effort, dubbed 'DeFi United', aimed at stabilizing the decentralized finance (DeFi) market. The exploit has left a substantial collateral shortfall, prompting a concerted effort to restore the backing of rsETH, a yield-bearing ether (ETH) derivative token at the center of the incident. Aave has announced that multiple participants have pledged their support, with the first commitments coming from Lido Finance and EtherFi.
Lido Labs Foundation, an ecosystem contributor to Lido Finance, has proposed allocating up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund. This fund will be used to reduce the rsETH backing shortfall and prevent forced liquidations across lending markets. EtherFi has also proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, while Stani Kulechov, Aave's founder, has personally committed 5,000 ETH to the cause.
Kulechov emphasized his dedication to finding the best possible outcome for users, stating, 'Aave is my life's work, and we're working tirelessly to resolve this and normalize market conditions as soon as possible.' The initiative follows the largest crypto exploit of the year, which has sent shockwaves through DeFi lending markets. The incident originated from a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens. Instead of selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets. This has resulted in impaired collateral, triggering a rush of deposit withdrawals and a $10 billion plunge in Aave's total asset value.
The estimated total shortfall stands at over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, early containment efforts included Arbitrum's security council freezing 30,766 ETH, worth around $71 million, tied to the exploit.
However, the majority of the stolen funds have been bridged and swapped into bitcoin via Thorchain, complicating recovery efforts. The current focus is on stabilizing the system through a coordinated bailout, aimed at recapitalizing rsETH and mitigating losses, rather than attempting to recover the stolen funds.