In the aftermath of a $292 million exploit, Aave and several prominent crypto firms have joined forces to launch a stabilization effort aimed at restoring the integrity of decentralized finance (DeFi) markets. The initiative, known as 'DeFi United', is led by Aave service providers and focuses on replenishing the collateral backing of rsETH, a yield-bearing ether (ETH) derivative token at the epicenter of the exploit.
Aave has announced that multiple participants have already committed to supporting the effort, with staking provider Lido Finance and EtherFi being among the first to offer aid. Lido Labs Foundation, an ecosystem contributor to Lido Finance, has proposed allocating up to 2,500 stETH, valued at approximately $5.7 million, to a dedicated relief fund. This fund would be utilized to reduce the shortfall in rsETH collateral and prevent forced liquidations across lending markets.
Additionally, EtherFi has proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, while Aave founder Stani Kulechov has pledged a 5,000 ETH contribution. Kulechov stated, 'Aave is my life's work, and we are working tirelessly to achieve the best possible outcome for our users. I am committed to resolving this situation and normalizing market conditions as soon as possible.' Aave plans to announce further commitments as they are formalized.
The DeFi United initiative follows the largest crypto exploit of the year, which has had far-reaching implications for DeFi lending markets. The incident originated from a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens. Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum.
This left Aave with impaired collateral, triggering a rush of withdrawals as lenders sought to access available funds. The total value of assets on Aave plummeted by $10 billion in the wake of the incident. According to Aave's incident report, the total shortfall is estimated to be over 112,000 rsETH. Prior to the DeFi United initiative, early containment efforts included Arbitrum's security council freezing 30,766 ETH, valued at roughly $71 million, tied to the exploit.
However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating the recovery process. The current effort prioritizes stabilizing the system through a coordinated bailout, aiming to recapitalize rsETH and mitigate losses rather than focusing on retrieving the stolen funds.