A coordinated industry response is underway as major DeFi players step in to stabilize markets after a massive $292 million exploit linked to KelpDAO.
Key Takeaways
- Aave and partners launched “DeFi United” to address bad debt caused by the KelpDAO exploit.
- Mantle proposed a 30,000 ETH loan to support Aave’s recovery efforts.
- Lido, EtherFi, and others pledged funds to help restore rsETH backing.
- Hack exposed vulnerabilities in cross chain systems, shaking confidence in DeFi lending.
What Happened?
A $292 million exploit tied to KelpDAO’s cross-chain bridge triggered widespread disruption across decentralized finance, leaving Aave facing significant bad debt and collateral damage. In response, leading protocols have come together under a coordinated initiative called DeFi United to contain the fallout and restore stability.
Aave is my life’s work and we’re working nonstop to find the best possible outcome for users.
— Stani (@StaniKulechov) April 23, 2026
I’m personally contributing 5000 ETH to DeFi United as we continue working together with partners on formalizing more commitments. I’m working to see this resolved and market conditions…
DeFi United Forms to Stabilize Markets
The crisis began after attackers exploited a vulnerability in KelpDAO’s integration with LayerZero, allowing them to mint 116,500 unbacked rsETH tokens. Instead of immediately selling these tokens, the attacker used them as collateral on Aave to borrow large amounts of legitimate assets.
This created a serious imbalance in Aave’s lending pools, with estimates placing the bad debt between $123 million and $230 million. The situation quickly escalated as users rushed to withdraw funds, leading to a sharp decline in total value locked across the platform.
To address the damage, Aave and its partners launched DeFi United, a coordinated recovery effort focused on restoring the backing of rsETH and preventing further liquidations.
Stani Kulechov said:
Major Contributions From Across DeFi
Several major players have already stepped forward with financial support and proposals aimed at stabilizing the ecosystem.
Key contributions include:
- Lido Finance proposing up to 2,500 stETH to reduce the rsETH shortfall.
- EtherFi and Aave leadership each pledging 5,000 ETH.
- Golem Foundation committing 1,000 ETH.
- Frax Finance and other protocols signaling upcoming support.
At the same time, Mantle Network introduced a more structured solution through a governance proposal known as MIP-34. The plan offers up to 30,000 ETH as a credit facility to Aave DAO.
The loan would include:
- Interest set at Lido staking rate plus 1%.
- A repayment period of up to 36 months.
- Collateral requirements including Aave tokens and revenue sharing.
The proposal aims to convert Mantle’s idle treasury into a yield generating asset, while strengthening long term collaboration with Aave.
Backing the move, Ben Zhou said, “When we got hacked the industry got together and helped us. It is the only right thing that we do the same.”
Recovery Efforts and Ongoing Risks
Efforts to recover funds have seen partial success. The Arbitrum Security Council froze over 30,000 ETH linked to the attacker, but a significant portion of stolen assets has already been moved and converted into Bitcoin through cross chain platforms, making recovery more difficult.
Instead of relying solely on fund recovery, the current strategy focuses on recapitalizing the system and restoring confidence in DeFi markets.
Additional proposals have also emerged, including suggestions to adjust Aave’s borrowing limits to unlock liquidity, though some community members warn such moves could introduce new risks of liquidation.
The exploit has also raised broader concerns about cross-chain bridge security, especially vulnerabilities tied to verification systems and infrastructure attacks such as node poisoning and DDoS disruptions.
CoinLaw’s Takeaway
From my perspective, this situation clearly shows both the strength and weakness of DeFi at the same time. On one hand, a single vulnerability created a massive ripple effect across the ecosystem. On the other, the speed at which major protocols stepped in to support Aave is something you rarely see in traditional finance.
In my experience, moments like this define the future of the industry. I found that while hacks continue to expose technical risks, coordinated responses like DeFi United could become a blueprint for handling crises going forward. Still, trust in cross chain systems has taken a hit, and rebuilding that confidence will take time and stronger safeguards.
