Key Highlights
- Aave’s governance team has introduced a proposal to allocate 25,000 ETH (approximately $58M) toward DeFi United for Kelp DAO exploit recovery
- A malicious actor exploited LayerZero bridge infrastructure to create unbacked rsETH tokens, which were then deposited into Aave as collateral
- Multiple DeFi protocols including Lido DAO, Ether.fi, and Golem have committed funds alongside individual donations to support restoration efforts
- Combined contributions to the DeFi United recovery initiative now total approximately 69,534 ETH (roughly $161M), potentially closing the funding gap
- Year-to-date DeFi total value locked has declined more than 27%, falling to approximately $80 billion from $110 billion
On Friday, service providers managing Aave operations introduced a governance motion calling for the protocol to deploy 25,000 ETH from its treasury reserves—valued at nearly $58 million—to the DeFi United initiative. This contribution aims to fully restore backing for rsETH tokens following the recent security breach at Kelp DAO.
The security incident occurred on April 18, when an exploiter identified and leveraged a critical flaw in Kelp’s Ethereum LayerZero bridge adapter. Through this vulnerability, the attacker successfully minted 152,577 rsETH tokens without proper backing, creating an initial deficit of approximately 163,183 ETH. These fraudulently generated tokens were subsequently deposited into Aave as collateral to withdraw legitimate assets, resulting in significant bad debt for the lending protocol.
While the governance proposal awaits community voting, it has already garnered substantial backing from stakeholders across the decentralized finance ecosystem.
Aave founder and chief executive Stani Kulechov personally committed 5,000 ETH from his private holdings, characterizing Aave as his “life’s work.” Additionally, Emilio Frangella, the protocol’s Senior VP of Engineering, pledged 500 ETH to the recovery initiative.
The collaborative response has extended beyond Aave. Lido DAO put forward a proposal to contribute as much as 2,500 ETH to the fund, while Ether.fi announced potential support of up to 5,000 ETH. Golem committed 1,000 ETH to the cause, with BGD Labs also making a contribution.
Bridging the Remaining Deficit
Mantle introduced an alternative proposal offering a low-interest credit line of up to 30,000 ETH, designed to help Aave manage any outstanding bad debt that donations fail to cover.
Approximately 30,700 ETH was successfully frozen on the Arbitrum network immediately following the breach, representing a significant component of the overall recovery calculation.
An independent tracking analysis published on X placed the actual rsETH deficit at 112,204 rsETH tokens, equivalent to roughly 118,400 ETH. When accounting for all pledged contributions, Mantle’s proposed credit facility, the frozen Arbitrum assets, and anticipated recoveries from both Aave and Compound protocols, calculations suggest the shortfall may be entirely addressed.
Analyst DCF GOD on X projected that the funding gap has been successfully closed, contingent upon all governance votes passing. Should this prove accurate, Aave may not require the complete credit line offered by Mantle.
Declining DeFi Metrics Amid Security Concerns
The DeFi United recovery fund currently stands at approximately 69,534 ETH—nearly $161 million—when combining all committed and proposed allocations.
According to data from The Block, total value locked throughout DeFi protocols currently registers just above $80 billion. This represents a decline exceeding 27% compared to the approximately $110 billion measured at the beginning of 2026.
Analysts from JPMorgan have observed that the frequency of security exploits is negatively impacting institutional appetite for DeFi participation, with some capital flowing instead toward stablecoin holdings.
The governance vote on Aave’s proposed 25,000 ETH allocation remains open. Similarly, all other protocol contributions await final ratification through their respective governance mechanisms.
