Aave Mobilizes DeFi Allies to Mitigate $292 Million KelpDAO Exploit Fallout

In the aftermath of a $292 million exploit that has left a significant collateral shortfall, Aave and several prominent crypto firms have launched a collaborative effort to stabilize the decentralized finance (DeFi) market. The initiative, known as 'DeFi United', aims to restore the backing of rsETH, a yield-bearing ether (ETH) derivative token at the center of the exploit.

Aave has announced that multiple participants have already committed to supporting the effort, with staking provider Lido Finance's ecosystem contributor, Lido Labs Foundation, proposing to allocate up to 2,500 stETH (worth approximately $5.7 million) to a dedicated relief fund. This would help reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets. EtherFi has also proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, while Aave founder Stani Kulechov has pledged a 5,000 ETH contribution. Kulechov stated that 'Aave is my life's work and we're working nonstop to find the best possible outcome for users', adding that he is 'working to see this resolved and market conditions normalized as soon as possible'.

The initiative follows the largest crypto exploit of the year, which has had far-reaching implications for DeFi lending markets. The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, where an attacker minted 116,500 unbacked rsETH tokens by exploiting the bridge's messaging system. Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing around $190 million in ETH and other assets across Ethereum and Arbitrum.

This left Aave with impaired collateral, triggering a rush of deposit withdrawals as lenders sought to retrieve available funds. The total value of assets on Aave plummeted by $10 billion in the wake of the incident. According to Aave's incident report, the total shortfall is estimated to be over 112,000 rsETH.

Prior to the DeFi United initiative, there were some early containment efforts, including Arbitrum's security council freezing 30,766 ETH (worth approximately $71 million) tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating recovery efforts.

The current initiative focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.