One of the biggest exploits of the year occurred in the world of decentralized finance (DeFi). Important names in the industry, including the cryptocurrency lending protocol Aave, launched a recovery initiative called “DeFi United” to restore balance to the ecosystem after the $292 million attack. This initiative aims to re-securely support rsETH, known as the yield-generating derivative token of Ethereum (ETH), which is at the center of the attack.
The massive attack shook the DeFi markets
The exploit in question occurred as a result of exploiting a vulnerability in KelpDAO’s integration with LayerZero. An anonymous attacker managed to generate 116,500 unbacked rsETH by interfering with the bridge messaging system. Approximately 90,000 of these tokens were deposited as collateral on the Aave platform. In this way, the attacker borrowed a total of $190 million from Ethereum and various other assets.
The value of crypto assets plummeted, and lenders tended to panic and withdraw their money. While a total value of around 15 billion dollars was locked before the incident, this value decreased to 10 billion dollars after the attack. According to the incident report prepared by Aave, there was a gap of over 112,000 rsETH in the system.
Recovery attempt: DeFi United
The DeFi United initiative, led by Aave, symbolizes the solidarity of many important crypto companies and protocols coming together with the intention of supporting the damaged ecosystem. Lido Labs Foundation, a subsidiary of Lido Finance, which provides staking services, proposed directing its fund worth 2,500 stETH, or approximately $5.7 million, to this recovery fund. This resource will be used to close the gap in rsETH collateral and prevent sudden liquidations in the market.
Then EtherFi stepped in and offered a support package of 5,000 ETH in total to protect users and prevent bad debt. Similarly, Aave founder Stani Kulechov personally offered to contribute 5,000 ETH to the recovery fund.
Stani Kulechov, founder of Aave, said: “Aave is my life’s work and we are working non-stop to find the best result for users. I am working hard to quickly resolve the problem and return market conditions to normal.”
Aave said it will announce more companies’ participation in the initiative as final details are finalized.
The fate of the funds and new security steps
With most of the post-hack funds detected on the Arbitrum network, Arbitrum’s security council froze 30,766 ETH (approximately $71 million). However, the other part of the stolen funds was converted into bitcoin using Thorchain, making it difficult to recover the assets.
Current efforts aim to keep user losses to a minimum by recapitalizing the rsETH asset rather than directly repurchasing the tokens. Many names in the industry emphasize the importance of coordination in terms of crypto infrastructure.
