In the aftermath of a $292 million exploit, Aave and several prominent cryptocurrency firms have launched a collaborative recovery effort, dubbed 'DeFi United,' to stabilize the decentralized finance (DeFi) market. The initiative, led by Aave service providers, aims to restore the backing of rsETH, a yield-bearing derivative token of ether (ETH) that was at the center of the exploit. Multiple participants have already committed to supporting the effort, with staking provider Lido Finance being among the first to propose a plan, allocating up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund. This move is intended to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets.
Following Lido's lead, EtherFi proposed a 5,000 ETH plan to safeguard users and prevent bad debt across DeFi, with Aave's founder, Stani Kulechov, also offering a 5,000 ETH contribution. Kulechov emphasized his commitment to finding the best possible outcome for users, stating, 'Aave is my life's work, and we're working tirelessly to resolve this issue and normalize market conditions as soon as possible.' The initiative comes in response to the largest crypto exploit of the year, which has sent ripples throughout DeFi lending markets. The incident occurred due to a vulnerability in KelpDAO's integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens.
Instead of selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum. This left Aave with impaired collateral, triggering a rush of withdrawals as lenders sought to access available funds, resulting in a $10 billion decline in the total value of assets on Aave.
The estimated total shortfall stands at over 112,000 rsETH, according to Aave's incident report. Prior to the DeFi United initiative, there were early attempts at containment, including Arbitrum's security council freezing 30,766 ETH, worth roughly $71 million, tied to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating recovery efforts. The current focus is on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.