Aave Leads DeFi Industry Bailout Effort Following $292 Million KelpDAO Hack
April 23, 2026 — In the wake of the largest cryptocurrency exploit of the year, decentralized finance (DeFi) platform Aave is spearheading an industry-wide recovery initiative aimed at stabilizing the market after a $292 million hack involving KelpDAO shook investor confidence and rattled lenders.
Background of the Exploit
The exploit originated from a vulnerability in KelpDAO’s integration with LayerZero, a cross-chain messaging system. Exploiting this weakness, an attacker minted approximately 116,500 unbacked rsETH tokens—a yield-bearing derivative token representing staked ether (ETH)—that lacked legitimate backing. Instead of liquidating these tokens immediately, the attacker deposited around 90,000 rsETH as collateral on Aave to borrow roughly $190 million worth of ETH and other assets across Ethereum and Arbitrum blockchains.
This resulted in a significant collateral shortfall on Aave’s platform and triggered a liquidity crisis as users rushed to withdraw their deposits. The total value of assets on Aave fell by an estimated $10 billion following the incident, and the platform is now left managing over 112,000 rsETH in unbacked tokens, according to Aave’s official incident report.
Coordinated Bailout: "DeFi United"
In response to the crisis, Aave is leading a collaborative bailout effort named "DeFi United" alongside major DeFi industry players. The initiative focuses on recapitalizing rsETH tokens to prevent forced liquidations and broader contagion across lending markets.
Aave stated on its official X (formerly Twitter) account that several participants had already committed to supporting the recovery:
-
Lido Finance, a leading staking provider, proposed allocating up to 2,500 stETH tokens—worth approximately $5.7 million—to a dedicated relief vehicle aimed at reducing the rsETH collateral shortfall.
-
EtherFi followed with a proposal to contribute 5,000 ETH to protect users and prevent bad debt from spreading throughout the DeFi ecosystem.
-
Stani Kulechov, founder of Aave, personally pledged 5,000 ETH toward the bailout fund. Kulechov reaffirmed his commitment by stating, “Aave is my life’s work and we’re working nonstop to find the best possible outcome for users. I’m working to see this resolved and market conditions normalized as soon as possible.”
Aave has indicated that additional commitments from other participants will be announced once formal agreements are finalized.
Earlier Containment Measures
Before the launch of "DeFi United," some containment efforts were already in motion. Notably, Arbitrum’s security council froze 30,766 ETH valued at roughly $71 million connected to the exploit, hindering the attacker’s ability to move those funds.
However, a significant portion of the stolen assets had been converted into Bitcoin through the Thorchain bridge, complicating recovery measures and shifting the focus toward stabilizing the DeFi system rather than reclaiming stolen funds.
Wider Implications for DeFi
The KelpDAO exploit has sent shockwaves across DeFi lending markets, underscoring the ongoing risks posed by cross-chain vulnerabilities and complex derivative tokens. The coordinated industry bailout effort led by Aave demonstrates a growing trend of DeFi platforms banding together to mitigate risks and protect users in times of crisis.
As the "DeFi United" initiative progresses, the broader crypto ecosystem will be watching closely to see if the collaboration can restore confidence and stem further disruption resulting from this high-profile security breach.
This article is part of ongoing coverage by CoinDesk on developments in decentralized finance and cryptocurrency security.