In the aftermath of a $292 million exploit, Aave and several prominent cryptocurrency companies are collaborating on a recovery initiative to stabilize the decentralized finance (DeFi) market. The effort, known as 'DeFi United', aims to restore the collateral backing of rsETH, a yield-bearing ether (ETH) derivative token at the center of the exploit. Aave has announced that multiple participants have committed to supporting this initiative, with Lido Finance's ecosystem contributor, Lido Labs Foundation, being the first to propose allocating up to 2,500 stETH (worth approximately $5.7 million) to a dedicated relief fund.
This allocation is intended to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets. Following this, EtherFi proposed a 5,000 ETH plan to safeguard users and avert bad debt across DeFi, with Aave's founder, Stani Kulechov, also contributing 5,000 ETH.
Kulechov stated, 'Aave is my life's work, and we are working tirelessly to find the best possible outcome for users. I am committed to resolving this issue and normalizing market conditions as soon as possible.' Aave plans to announce additional commitments once they are formalized.
The initiative comes in response to the largest crypto exploit of the year, which has significantly impacted DeFi lending markets. The exploit originated from a vulnerability in KelpDAO's integration with LayerZero, where an attacker created 116,500 unbacked rsETH tokens by exploiting the bridge's messaging system. Instead of selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This resulted in Aave having impaired collateral, triggering a rush of withdrawals by lenders and a subsequent $10 billion plunge in the total value of assets on Aave.
The estimated total shortfall is over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, there were early containment efforts, including Arbitrum's security council freezing 30,766 ETH (worth roughly $71 million) linked to the exploit.
However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating the recovery process. The current effort focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.