In the aftermath of a $292 million exploit, Aave and several major cryptocurrency firms have come together to stabilize the decentralized finance (DeFi) market. The collaborative initiative, known as 'DeFi United', aims to restore the collateral backing of rsETH, a yield-bearing ether (ETH) derivative token that was at the center of the exploit. Aave has announced that multiple participants have already committed to supporting this effort.
Lido Finance's ecosystem contributor, Lido Labs Foundation, was the first to propose a plan, allocating up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund. The funds will be utilized to reduce the shortfall in rsETH backing, thereby preventing forced liquidations across lending markets. This was followed by EtherFi's proposal of a 5,000 ETH plan to protect users and prevent bad debt across DeFi. Aave's founder, Stani Kulechov, has also pledged a 5,000 ETH contribution.
'Aave is my life's work, and we are working tirelessly to find the best possible outcome for our users,' Kulechov stated. 'I am committed to resolving this issue and normalizing market conditions as soon as possible.' Aave plans to announce additional commitments once they are formalized. The initiative comes in response to the largest crypto exploit of the year, which has sent shockwaves through DeFi lending markets.
The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens by exploiting the bridge's messaging system. Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This resulted in Aave having impaired collateral, triggering a rush of withdrawals as lenders sought to retrieve available funds.
The total value of assets on Aave plummeted by $10 billion following the incident. According to Aave's incident report, the total shortfall is estimated to be over 112,000 rsETH.
Prior to the DeFi United initiative, there were some early containment efforts. Earlier this week, Arbitrum's security council froze 30,766 ETH, worth approximately $71 million at the time, tied to the exploit.
However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more complex. The current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.