In response to a $292 million exploit that has left a substantial gap in collateral backing, Aave and several prominent cryptocurrency firms are collaborating on a recovery initiative to stabilize decentralized finance (DeFi) markets. The effort, known as 'DeFi United' and led by Aave service providers, aims to replenish the backing of rsETH, a yield-bearing derivative token of ether (ETH) central to the exploit. Aave has reported that multiple participants have already committed to supporting this endeavor.
Among the first to offer aid was staking provider Lido Finance, whose ecosystem contributor Lido Labs Foundation proposed allocating up to 2,500 stETH, valued at approximately $5.7 million, into a dedicated relief fund. This allocation is intended to reduce the shortfall in rsETH backing and mitigate the risk of forced liquidations across lending markets.
Following this, EtherFi proposed a plan involving 5,000 ETH to safeguard users and prevent the accumulation of bad debt across DeFi. Additionally, Stani Kulechov, the founder of Aave, pledged a contribution of 5,000 ETH. In a statement, Kulechov expressed his commitment to finding the best possible outcome for users, emphasizing his dedication to resolving the situation and normalizing market conditions as soon as possible.
Aave plans to announce further commitments as they are formalized. This initiative follows the largest cryptocurrency exploit of the year, which sent shockwaves through DeFi lending markets. The incident originated from a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens.
Instead of selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This resulted in Aave having impaired collateral, triggering a rush of withdrawals as lenders sought to retrieve available funds, and leading to a $10 billion decline in the total value of assets on Aave. According to Aave's incident report, the total shortfall is estimated to be over 112,000 rsETH.
Prior to the DeFi United initiative, there were initial efforts to contain the damage. Earlier in the week, Arbitrum's security council froze 30,766 ETH, worth roughly $71 million at the time, linked to the exploit. However, the remainder of the stolen funds were bridged and swapped into bitcoin via Thorchain, complicating recovery efforts.
The current focus is on stabilizing the system through a coordinated bailout to recapitalize rsETH and minimize losses, rather than attempting to recover the stolen funds.