In response to a massive $292 million exploit, Aave and several prominent cryptocurrency firms have initiated a collaborative recovery effort to stabilize the decentralized finance (DeFi) market. The effort, known as 'DeFi United', aims to restore the backing of rsETH, an ether (ETH) yield-bearing derivative token central to the exploit. Aave has announced that multiple participants have already committed to supporting this initiative.
Lido Finance's ecosystem contributor, Lido Labs Foundation, has proposed allocating up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund. This allocation is intended to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets. Following this, EtherFi has proposed a plan involving 5,000 ETH to protect users and prevent bad debt across DeFi.
Stani Kulechov, Aave's founder, has also pledged a 5,000 ETH contribution. Kulechov stated, 'Aave is my life's work, and we are working tirelessly to find the best possible outcome for our users. I am committed to resolving this issue and normalizing market conditions as soon as possible.' Aave plans to announce additional commitments as they are formalized.
This initiative comes in the wake of the year's largest crypto exploit, which has significantly impacted DeFi lending markets. The incident originated from a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens. Instead of selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing around $190 million in ETH and other assets across Ethereum and Arbitrum. This left Aave with impaired collateral, triggering a rush of deposit withdrawals as lenders sought to access available funds.
The total value of assets on Aave subsequently plummeted by $10 billion. According to Aave's incident report, the total shortfall is estimated to be over 112,000 rsETH.
Prior to the DeFi United initiative, there were early containment efforts, including Arbitrum's security council freezing 30,766 ETH, worth roughly $71 million, tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating recovery efforts. The current initiative focuses on stabilizing the system through a coordinated bailout, aiming to recapitalize rsETH and mitigate losses rather than recovering the stolen funds.