Aave Unites DeFi Community to Mitigate $292 Million KelpDAO Exploit

In the aftermath of a $292 million exploit, Aave has rallied prominent crypto firms to launch a recovery initiative, dubbed 'DeFi United', aimed at restoring the collateral backing of rsETH, a yield-bearing ether derivative token. The effort, led by Aave service providers, seeks to mitigate the impact of the largest crypto theft of the year on decentralized finance (DeFi) markets. Aave announced that multiple participants have already committed to supporting the initiative, with Lido Finance's ecosystem contributor, Lido Labs Foundation, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, to a relief fund.

This fund would be used to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets. EtherFi has also proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, while Aave's founder, Stani Kulechov, has pledged a 5,000 ETH contribution. According to Kulechov, 'Aave is my life's work, and we're working tirelessly to find the best possible outcome for users.' The initiative follows the biggest crypto exploit of the year, which exposed a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens. The attacker then deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets.

This triggered a run on deposits, resulting in a $10 billion decline in the total value of assets on Aave. The total estimated shortfall is over 112,000 rsETH, according to Aave's incident report.

Prior to the DeFi United initiative, some early containment efforts were made, including Arbitrum's security council freezing 30,766 ETH, worth roughly $71 million, tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating recovery efforts. The current initiative focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.