Coalition Unveils Plan to Mitigate Aave Token Exploit

The aftermath of a $300 million exploit typically doesn't come with a straightforward solution. However, DeFi United, a coalition comprising multiple blockchain projects and crypto ecosystem stakeholders, is attempting to devise a step-by-step plan to rectify the situation. This plan aims to restore the backing of rsETH following the Kelp DAO hack, which sent shockwaves through lending markets after releasing over 116,000 unaccounted tokens. The proposed solution, outlined on Aave's official X account, resembles a coordinated recovery effort, heavily reliant on Aave's infrastructure to rectify the damage and stabilize the markets. The incident originated from an exploited vulnerability in rsETH's bridge on April 18, allowing an attacker to forge a legitimate message and trick the system into releasing 116,500 rsETH without proper backing. These tokens were subsequently dispersed across multiple wallets and utilized as collateral on various lending platforms, including Aave. As a result, protocols like Aave found themselves holding unbacked collateral, leading to a systemic issue. According to the proposal, the majority of the exploited funds remain active, with approximately 107,000 of the original 116,500 rsETH still tied to positions on Aave and Compound. To address this, DeFi United's proposal seeks to restore the backing of rsETH and unwind the loans created using the extra tokens. The plan involves securing sufficient ETH commitments to re-collateralize rsETH and gradually reintroducing this ETH into the system to ensure the token is fully backed. Simultaneously, the proposal focuses on the lending markets, where the damage is most pronounced. Rather than allowing the situation to unfold chaotically, the plan involves carefully unwinding the affected positions. A key aspect of this process is dealing with the attacker's positions on Aave, which are essentially loans backed by rsETH that should not have existed. By temporarily adjusting the valuation of rsETH within the system, these positions can be liquidated or closed more smoothly, enabling the recovery of underlying assets like ETH. The proposal estimates that this could free up around 13,000 ETH from Aave alone. Once the collateral is recovered, it will be converted into ETH and used to cover the shortfall created by the exploit, effectively filling the hole left behind. Although the process carries risks, including the need for governance approvals and the successful deployment of committed funds, the plan represents a more coordinated response than DeFi has typically managed. If executed as intended, the ultimate goal is to fully restore the backing of rsETH and stabilize the affected markets.