DeFi United Moves to Restore rsETH Backing After $292M Exploit
DeFi United, a recovery coalition tied to Aave (AAVE), has detailed its plan to restore backing for rsETH after the April 18 exploit of Kelp DAO’s cross-chain bridge. The attack released 116,500 rsETH—worth $292 million at the time—without proper burning on the source chain, creating a backing shortfall. The group’s technical roadmap proposes converting committed ETH into rsETH and depositing it into the affected bridge lockbox, enabling the bridge to resume operations.
The Kelp exploit, attributed to North Korea’s Lazarus Group, exploited a security flaw in Kelp's single-verifier bridge design. The drained rsETH was later used as collateral on platforms like Aave and Compound, generating systemic bad debt. As of now, seven attacker-linked addresses still hold 107,000 rsETH-backed positions.
To recover these funds, DeFi United plans to adjust the rsETH oracle price temporarily, liquidate exploiter positions in a controlled manner, and redeem the rsETH for ETH. The recovered ETH will be used to clear deficits in affected protocols. However, the plan’s success hinges on governance approvals, DAO votes, and the attacker not interfering with the liquidation process.
Ethereum Community Rallies Behind Recovery
Key Ethereum ecosystem players have stepped in to support the recovery effort. Consensys and its co-founder Joe Lubin have committed up to 30,000 ETH, while Sharplink, an Ethereum-focused treasury firm, is helping structure the plan. Aave Labs has also requested the Arbitrum DAO to release 30,765 ETH frozen by the Arbitrum Security Council after the exploit.
As of April 28, DeFi United has raised $302.26 million (132,706 ETH) in commitments, though some funds are still awaiting DAO votes for final execution. The initiative has unified the DeFi ecosystem, with multiple protocols coordinating to mitigate the exploit’s fallout.
Market Context and Broader Implications
rsETH, an Ethereum staking derivative, currently trades at $2,327.75, down 1.67% over the past 24 hours. The exploit not only exposed vulnerabilities in Kelp's bridge infrastructure but also underscored broader DeFi risks tied to cross-chain interoperability. Security flaws in bridge designs—specifically Kelp’s controversial 1-of-1 verifier configuration—have reignited debates around decentralization and security standards in DeFi.
Given the scale of the exploit, the recovery plan’s successful execution could signal the resilience of DeFi protocols in addressing systemic threats. However, the reliance on governance approvals and multisig coordination highlights the operational challenges of decentralized recovery efforts. The outcome will likely influence future bridge designs and risk management strategies across the industry.
For traders and stakers, the restoration of rsETH backing is critical to restoring confidence in its ecosystem. Any delays or disruptions in the recovery plan could further impact rsETH’s price and liquidity, making this a pivotal moment for the token’s market stability.
All eyes will be on DeFi United’s next steps, especially as DAO votes and governance processes unfold in the coming weeks. Success or failure here could set a precedent for how DeFi handles large-scale exploits in the future.