Coalition Unveils Plan to Mitigate $300 Million Token Exploit Impact on Aave Users

The aftermath of a $300 million exploit typically doesn't come with a straightforward solution. However, DeFi United, a collective of multiple blockchain projects and crypto ecosystem stakeholders, is attempting to create a roadmap for recovery. Following the Kelp DAO hack earlier this month, which released over 116,000 unaccounted-for tokens into the market, the group has outlined a step-by-step proposal to restore the backing of rsETH and stabilize affected lending markets. The plan, shared on Aave's official X account, relies heavily on Aave's infrastructure to systematically address the damage and return markets to a stable state. The incident originated from an exploit of rsETH's bridge on April 18, where an attacker manipulated the system into releasing 116,500 rsETH without proper backing by forging a legitimate-looking message. These tokens were then dispersed across various wallets and utilized across DeFi, with a substantial portion used as collateral on lending platforms like Aave. This created a systemic issue, as protocols found themselves holding collateral that lacked full backing. According to the proposal, the majority of the exploited funds remain active, with approximately 107,000 of the original 116,500 rsETH still tied up in positions across Aave and Compound. To address this, DeFi United's proposal aims to restore the backing of rsETH and unwind the loans created using the exploited tokens simultaneously. The group claims to have secured sufficient ETH commitments to fully re-collateralize rsETH, planning to feed this ETH back into the system in stages to restore the token's backing. In tandem, the proposal focuses on the lending markets where the exploit's impact is most pronounced. Rather than allowing the situation to unfold chaotically, the plan involves a controlled unwinding of the damaged positions. A key aspect of this involves addressing the positions the attacker opened on Aave, which are essentially loans backed by rsETH that should not have existed. Instead of waiting for these loans to collapse, the proposal suggests a controlled liquidation or closure of these positions by temporarily adjusting rsETH's valuation within the system. As these positions are unwound, the underlying assets, such as ETH, can be recovered, potentially freeing up around 13,000 ETH from Aave. This collateral will then be converted into ETH and used to cover the exploit's shortfall. While the process carries risks, including the need for governance approvals and the successful deployment of committed funds, it represents a more coordinated response than DeFi has typically mustered. If executed as intended, the ultimate goal is clear: the full restoration of rsETH backing and the stabilization of all affected markets.