Points of Focus

• Over 40,000 ETH pledged across DeFi to recapitalize rsETH after a $292M exploit.
• The attack exposed how unbacked collateral can cascade into Aave’s lending markets.
• Coordinated response introduces structured, credit-based recovery mechanisms across DeFi.

A coordinated response is underway across decentralized finance after a $292 million exploit tied to KelpDAO left Aave managing a major collateral shortfall, forcing leading protocols to step in with capital to stabilize lending markets and contain contagion risk.

KelpDAO exploit triggers collateral shock across Aave

The breach began on April 18, 2026, when an attacker exploited KelpDAO’s LayerZero integration to mint 116,500 unbacked rsETH. The attacker then deposited close to 90,000 rsETH into Aave and borrowed around $190 million in Ether and related assets.

This distinction matters. The exploit didn’t break Aave’s core contracts but introduced unbacked collateral into the system.

Aave’s incident review points to a deficit exceeding 112,000 rsETH, with projected bad debt between $124 million and $230 million. The impact was immediate. Liquidity providers began withdrawing funds, and total value locked dropped sharply.

Arbitrum’s security council froze 30,766 ETH linked to the attacker, but on-chain transaction data shows a large share of funds, estimated above 75,000 ETH, has already been moved through THORChain and converted into Bitcoin, reducing the chances of recovery.

The Arbitrum Security Council has taken emergency action to freeze the 30,766 ETH being held in the address on Arbitrum One that is connected to the KelpDAO exploit. The Security Council acted with input from law enforcement as to the exploiter’s identity, and, at all times,…

— Arbitrum (@arbitrum) April 21, 2026

DeFi United mobilizes ecosystem-wide ETH commitments

Aave’s response centers on “DeFi United,” a coordinated initiative to restore rsETH backing. The goal isn’t to reverse the exploit. It is to prevent forced liquidations and stabilize interconnected lending pools.

Lido Finance proposed allocating up to 2,500 stETH to a dedicated relief vehicle designed to reduce system-wide spillover.

A proposal for Lido DAO to contribute to @aave’s coordinated rsETH relief effort has landed on the Research Forum following this week’s Kelp's rsETH LayerZero bridge exploit.

The proposal authorizes a one-time, capped contribution of up to 2,500 stETH to a dedicated relief…

— Lido (@LidoFinance) April 23, 2026

EtherFi has committed 5,000 ETH to protect users and limit bad debt exposure.

Stani Kulechov pledged another 5,000 ETH, signaling direct founder-level involvement in stabilizing the protocol.

Aave is my life's work and we're working nonstop to find the best possible outcome for users.

I’m personally contributing 5000 ETH to DeFi United as we continue working together with partners on formalizing more commitments. I’m working to see this resolved and market conditions…

— Stani (@StaniKulechov) April 23, 2026

Support has expanded beyond core contributors. LayerZero, Ethena, Ink Foundation and Frax Finance have all confirmed participation, framing the effort as a coordinated industry response rather than a single-protocol fix.

The messaging across participants is consistent. Stabilization comes first.

Mantle loan proposal introduces structured recovery financing

Alongside direct contributions, Mantle Network proposed a loan facility of up to 30,000 ETH to Aave DAO. Unlike grants, this structure includes yield, collateral requirements and defined repayment terms.

Following this week's rsETH incident involving @KelpDAO and @LayerZero_Core, a proposal has been put forward for Mantle to contribute a loan facility to @aave's coordinated relief effort.

The loan would form part of a wider coordinated framework, structured to minimize…

— Mantle (@Mantle_Official) April 24, 2026

This approach changes the dynamic. Treasury capital is no longer used only for support. It is deployed as a credit instrument, blending risk management with return generation.

Stabilization priority highlights limits of fund recovery

Aave has paused rsETH reserves across multiple networks as part of containment. The focus remains on rebuilding collateral backing rather than tracing stolen assets.

This reflects a practical constraint. With a large portion of funds already laundered, recovery paths are limited.

The broader implication is harder to ignore. DeFi is showing it can coordinate quickly under stress, but that coordination depends on voluntary capital support. If similar events occur repeatedly, the model will face pressure.

For now, the coordinated response is stabilizing conditions. The question is whether this level of coordination becomes a standard feature of DeFi or remains a response reserved for its largest crises.