Aave rallies DeFi partners to contain fallout from $292 million KelpDAO hack
Industry players are coordinating a recovery effort as the year’s biggest crypto theft rattled Aave, with Lido and EtherFi being firsts to offer aid.
Updated Apr 23, 2026, 9:21 p.m. Published Apr 23, 2026, 8:52 p.m.
Aave and several major crypto firms are coordinating a recovery effort to stabilize decentralized finance (DeFi) markets after a $292 million exploit left the sector’s largest lender grappling with a large hole in collateral backing.
The initiative, dubbed “DeFi United” and led by Aave service providers, is aimed at restoring the backing of rsETH, a yield-bearing derivative token of ether (ETH), that sits at the center of the exploit.
Aave said in a post on X that multiple participants have already indicated commitments to support the effort.
The first among them was staking provider Lido Finance, whose ecosystem contributor Lido Labs Foundation put forward a proposal to allocate up to 2,500 stETH, worth roughly $5.7 million at current prices, into a dedicated relief vehicle.
The funds would be used to reduce the shortfall in rsETH backing and help prevent forced liquidations across lending markets.
That was followed by EtherFi proposing a 5,000 ETH plan to “protect users and prevent bad debt” across DeFi.
Stani Kulechov, founder of Aave, offered a 5,000 ETH contribution.
“Aave is my life’s work and we’re working nonstop to find the best possible outcome for users,” he said in an X post. “I’m working to see this resolved and market conditions normalized as soon as possible.”
Aave said it plans to announce more commitments once formalized.
Exploit ripples across DeFi
The initiative comes after the biggest crypto exploit of the year rattled DeFi lending markets.
The incident traces back to a vulnerability in KelpDAO’s integration with LayerZero, where an attacker minted 116,500 unbacked rsETH tokens by exploiting the bridge’s messaging system.
Instead of dumping the tokens, the attacker deposited nearly 90,000 rsETH into Aave as collateral, borrowing about $190 million in ETH and other assets across Ethereum and Arbitrum.
That left Aave with impaired collateral, triggering a run on deposits as lenders rushed to withdrew available funds. The total value of assets on Aave plunged by $10 billion following the incident.
The total hole is estimated to be more than 112,000 rsETH, according to Aave’s incident report.
Before the DeFi United initiative, there have been some early containment efforts. Earlier this week, Arbitrum’s security council froze 30,766 ETH, worth roughly $71 million then, tied to the exploit.
However, the remaining of the stolen funds were bridged and swapped into bitcoin via Thorchain, making recovery more complex.
The current effort focuses less on clawing back funds and more on stabilizing the system with a coordinated bailout to recapitalize rsETH and mitigate losses.
More For You
The stablecoin issuer said the action followed U.S. law enforcement requests as global watchdog FATF warned of growing role of digital dollars in illicit money flows.
What to know:
- Tether said it froze $344 million in USDT stablecoin on the Tron blockchain tied to suspected illicit activity.
- The action followed coordination with U.S. law enforcement, the firm said.
- The news comes as debate is growing over stablecoin issuers’ role in stopping illicit money flows.
