Aave and several major crypto firms are coordinating a recovery effort to stabilize decentralized finance (DeFi) markets after a $292 million exploit left the sector’s largest lender grappling with a gaping hole in collateral backing.
The initiative, called “DeFi United” and led by Aave service providers, aims to restore support for rsETH, a yield-generating ether (ETH)-derived token, which is at the heart of the exploit.
Aave said in a post on X that several participants have already indicated commitments to support the effort.
The first of these was staking provider Lido Finance, whose ecosystem collaborator Lido Labs Foundation submitted a proposal to allocate up to 2,500 stETH, worth approximately $5.7 million at current prices, into a dedicated aid vehicle.
The funds would be used to reduce the rsETH support shortfall and help prevent forced liquidations in the lending markets.
This was followed by EtherFi proposing a 5,000 ETH plan to “protect users and prevent bad debt” in DeFi.
Stani Kulechov, founder of Aave, offered a contribution of 5,000 ETH.
“Aave is my life’s work and we are working non-stop to find the best possible outcome for users,” he said in an X post. “I am working to get this resolved and market conditions normalized as soon as possible.”
Aave said it plans to announce more commitments once they are formalized.
Exploit spreads in DeFi
The initiative comes after the biggest crypto exploit of the year shook the DeFi lending markets.
The incident can be traced back to a vulnerability in KelpDAO’s integration with LayerZero, where an attacker minted 116,500 unbacked rsETH tokens by exploiting the bridge’s messaging system.
Instead of dumping the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing about $190 million worth of ETH and other assets on Ethereum and Arbitrum.
That left Aave with deteriorated collateral, triggering a run on deposits as lenders rushed to withdraw available funds. The total value of Aave’s assets plummeted by $10 billion following the incident.
The total hole is estimated to be over 112,000 rsETH, according to the Aave incident report.
Prior to the DeFi United initiative, there were some initial containment efforts. Earlier this week, Arbitrum’s security board froze 30,766 ETH, worth approximately $71 million at the time, linked to the exploit.
However, the rest of the stolen funds were bridged and changed to bitcoin through Thorchain, making recovery more complex.
The current effort is focused less on recovering funds and more on stabilizing the system with a coordinated bailout to recapitalize rsETH and mitigate losses.
