Aave rallies DeFi partners to contain fallout from $292 million KelpDAO hack

Industry players are coordinating a recovery effort as the year's biggest crypto rattled Aave, with Lido and EtherFi being firsts to offer aid.

What to know:

• Aave and partners are coordinating major recovery effort across DeFi to cover a shortfall and prevent bad debt after the $292 million exploit tied to KelpDAO.
• Lido Finance, EtherFi and Aave founder Stani Kulechov among those who proposed ether (ETH) to cover the hole.
• The initiative comes after an attacker created unbacked rsETH tokens and used them to borrow ether from Aave, leaving the protocol with impaired collateral and triggering a withdrawal wave.

Aave and several major crypto firms are coordinating a recovery effort to stabilize decentralized finance (DeFi) markets after a $292 million exploit left the sector's largest lender grappling with a large hole in collateral backing.

The initiative, dubbed "DeFi United" and led by Aave service providers, is aimed at restoring the backing of rsETH, a yield-bearing derivative token of ether (ETH), at the center of the exploit.

Aave said in a post on X that multiple participants have already made indicative commitments to support the effort.

The first among them was staking provider Lido Finance, whose ecosystem contributor Lido Labs Foundation put forward a proposal to allocate up to 2,500 stETH, worth roughly $5.7 million at current prices, into a dedicated relief vehicle.

The funds would be used to reduce the shortfall in rsETH backing and help prevent forced liquidations across lending markets.

That was followed by EtherFi proposing a 5,000 ETH plan to "protect users and prevent bad debt" across DeFi.

Stani Kulechov, founder of Aave, offered a 5,000 ETH contribution.

"Aave is my life's work and we're working nonstop to find the best possible outcome for users," he said in an X post. "I’m working to see this resolved and market conditions normalized as soon as possible."

Aave said it plans to announce more commitments once formalized.

Exploit ripples across DeFi

The initiative comes after the biggest crypto exploit of the year rattled DeFi lending markets,

The incident traces back to a vulnerability in KelpDAO’s integration with LayerZero, where an attacker minted 116,500 unbacked rsETH tokens by exploiting the bridge’s messaging system.

Instead of dumping the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing about $190 million in ETH and other assets across Ethereum and Arbitrum.

That left Aave with impaired collateral, triggering a run on deposits as lenders rushed to withdrew available funds. The total value of assets on Aave plunged by $10 billion following the incident.

The total hole is estimated to be more than 112,000 rsETH, according to Aave's incident report.

Before the DeFi United initiative, there have been some early containment efforts. Earlier this week, Arbitrum’s security council froze 30,766 ETH, worth roughly $71 million then, tied to the exploit.

However, the remaining of the stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more complex.

The current effort focuses less on clawing back funds and more on stabilizing the system with a coordinated bailout to recapitalize rsETH and mitigate losses.

More For You

The stablecoin issuer said the action followed U.S. law enforcement requests as global watchdog FATF warned of growing role of digital dollars in illicit money flows.

What to know:

• Tether said it froze $344 million in USDT stablecoin on the Tron blockchain tied to suspected illicit activity.
• The action followed coordination with U.S. law enforcement, the firm said.
• The news comes as debate is growing over stablecoin issuers' role in stopping illicit money flows.

Inside the $71 million freeze on Arbitrum that has the crypto world questioning what decentralization really means

2 hours ago

The market repriced DeFi in just 48 hours

4 hours ago

Crypto for Advisors: AI Agents Using Crypto

6 hours ago

Tether freezes $344 million in USDT on Tron tied to 'illicit activity'

6 hours ago

JPMorgan says persistent security flaws curb DeFi’s institutional appeal

6 hours ago

BIS warns cryptocurrency exchanges are becoming ‘shadow banks,’ and why that's a risk

6 hours ago

The $145 billion math: Why bitcoin’s quantum threat is manageable, not existential

7 hours ago

More than 100 crypto firms urge Senate to move on U.S. market structure bill

10 hours ago

The DAT collapse: Pantera wants Satsuma to dump its bitcoin as shares crash 99%

10 hours ago

U.S. military runs Bitcoin node, sees crypto as power projection versus China

9 hours ago

Bitcoin slips from near $80,000 as oil price increase weighs on risk assets

10 hours ago

More than 90% of Web3 games failed after $15 billion boom as gamers never showed up: Caladan

7 hours ago