TLDR
- The KelpDAO exploit saw attackers mint unbacked rsETH and drain nearly $190M from Aave lending markets.
- Aave and partners launched DeFi United to restore collateral and stabilize the ecosystem after the exploit.
- Lido, EtherFi, and Aave founder pledged ETH contributions to reduce shortfall and prevent bad debt risks.
- The exploit triggered massive withdrawals, cutting Aave’s total value locked by nearly $10 billion quickly.
Aave is coordinating a sector-wide response after a $292 million exploit linked to KelpDAO disrupted decentralized finance markets. The recovery effort brings together major DeFi players aiming to stabilize collateral backing and prevent further stress across lending platforms.
Coordinated response takes shape
The recovery plan, called DeFi United, is being led by Aave service providers alongside key ecosystem partners. The initiative focuses on restoring the backing of rsETH, the token at the center of the KelpDAO exploit. As a result, early commitments have already emerged from several major participants.
Aave confirmed that multiple contributors signaled support for the DeFi United effort. The tweet outlined ongoing coordination and noted that more commitments would be announced after formal agreements are completed. This public communication helped calm concerns among users tracking the KelpDAO exploit.
Lido Finance moved quickly by proposing up to 2,500 stETH for a relief vehicle. The allocation is designed to reduce the shortfall linked to the KelpDAO exploit and stabilize lending markets. Shortly after, EtherFi introduced a plan to contribute 5,000 ETH to support users and limit bad debt exposure.
Aave founder Stani Kulechov also confirmed a 5,000 ETH commitment through a separate X post. His message stressed urgency and reaffirmed efforts to restore normal market conditions after the KelpDAO exploit. These contributions form the early framework of the DeFi United initiative.
The coordinated response reflects a broader attempt to contain systemic risk. Rather than focusing only on fund recovery, participants are working to recapitalize affected assets. This approach aims to rebuild confidence following the KelpDAO exploit.
Exploit triggers market stress
The KelpDAO exploit originated from a vulnerability tied to its LayerZero integration. An attacker managed to mint 116,500 unbacked rsETH tokens by manipulating the bridge messaging system. This action created artificial collateral that later disrupted lending protocols.
Instead of selling the tokens, the attacker deposited nearly 90,000 rsETH into Aave. This allowed borrowing of around $190 million in ETH and other assets across networks. As a result, the KelpDAO exploit left Aave with weakened collateral backing.
The incident quickly triggered a withdrawal wave among users. Depositors rushed to remove funds, leading to a sharp drop in total value locked. Aave recorded a decline of roughly $10 billion in assets following the KelpDAO exploit.
According to Aave’s incident report, the remaining gap exceeds 112,000 rsETH. This shortfall continues to pressure the system while recovery efforts develop. The DeFi United initiative is expected to address this gap gradually.
Some containment actions were taken earlier in the week. Arbitrum’s security council froze over 30,000 ETH tied to the KelpDAO exploit. However, a portion of the funds had already been moved and converted into bitcoin, complicating recovery.
Given these developments, the current focus remains on stabilization rather than retrieval. The DeFi United effort seeks to restore balance across affected protocols. As coordination continues, the industry response to the KelpDAO exploit remains closely watched.
