In the aftermath of a $292 million exploit that has left a significant shortfall in collateral backing, Aave and several prominent cryptocurrency companies have come together to stabilize decentralized finance (DeFi) markets through a coordinated recovery effort. Dubbed 'DeFi United', the initiative, led by Aave service providers, aims to restore the backing of rsETH, a yield-bearing derivative token of ether (ETH) central to the exploit.
Aave has announced that multiple participants have already committed to supporting the effort, with Lido Finance's ecosystem contributor, Lido Labs Foundation, proposing to allocate up to 2,500 stETH, valued at approximately $5.7 million, into a dedicated relief fund. This allocation is intended to reduce the shortfall in rsETH backing and help prevent forced liquidations across lending markets.
Furthermore, EtherFi has proposed a 5,000 ETH plan to 'protect users and prevent bad debt' across DeFi, with Stani Kulechov, founder of Aave, also offering a 5,000 ETH contribution. Kulechov stated, 'Aave is my life's work, and we are working tirelessly to find the best possible outcome for users. I am committed to resolving this issue and normalizing market conditions as soon as possible.' Aave plans to announce additional commitments once they are formalized.
The initiative follows the largest crypto exploit of the year, which has sent ripples across DeFi lending markets. The incident originated from a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens. Instead of selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum.
This left Aave with impaired collateral, triggering a rush of deposit withdrawals as lenders sought to access available funds, resulting in a $10 billion plunge in the total value of assets on Aave. According to Aave's incident report, the total shortfall is estimated to be over 112,000 rsETH.
Prior to the DeFi United initiative, there were early containment efforts, including Arbitrum's security council freezing 30,766 ETH, worth approximately $71 million, linked to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating recovery efforts.
The current initiative focuses on stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than attempting to recover the stolen funds.