In the aftermath of a $292 million exploit, Aave and several prominent cryptocurrency firms have launched a collaborative recovery initiative to stabilize DeFi markets. The effort, known as 'DeFi United,' aims to restore the backing of rsETH, a yield-bearing ether derivative token at the center of the exploit. Multiple participants, including staking provider Lido Finance and EtherFi, have already committed to supporting the initiative.
Lido's ecosystem contributor, Lido Labs Foundation, has proposed allocating up to 2,500 stETH, valued at approximately $5.7 million, to a relief vehicle. This fund will be used to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets. Additionally, EtherFi has proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, while Aave's founder, Stani Kulechov, has offered a 5,000 ETH contribution.
The initiative follows the largest crypto exploit of the year, which exposed a vulnerability in KelpDAO's integration with LayerZero. An attacker exploited this vulnerability to mint 116,500 unbacked rsETH tokens, depositing nearly 90,000 into Aave as collateral and borrowing around $190 million in ETH and other assets. This resulted in impaired collateral, triggering a run on deposits and a $10 billion plunge in Aave's total asset value. The estimated total hole stands at over 112,000 rsETH, according to Aave's incident report.
Prior to the DeFi United initiative, some containment efforts were made, including Arbitrum's security council freezing 30,766 ETH tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating recovery efforts. The current initiative prioritizes stabilizing the system through a coordinated bailout, focusing on recapitalizing rsETH and mitigating losses rather than recovering the stolen funds.