Aave, Compound Unveil Technical Plan to Address Fallout From $290M Kelp DAO Hack
Speculation Analysis
Key Takeaways
- DeFi United coalition reveals technical plan to eliminate bad debt from the Kelp DAO hack.
- Over $303 million in ETH commitments secured to backstop Aave and Compound.
- Recovery targets approximately 29,776 ETH from affected lending positions.
- Hackers used 89,567 unbacked rsETH as collateral to borrow $82.65 million in WETH and wstETH.
- Arbitrum Security Council froze $71.5 million in exploiter funds.
What Happened
DeFi United, an Aave-led industry coalition, published a technical implementation plan to restore backing for rsETH tokens and purge bad debt left by North Korean hackers on Aave and Compound. The move addresses fallout from the April 18 Kelp DAO hack, where attackers stole $293 million by tricking the protocol into releasing 116,500 unbacked rsETH—18% of the token’s circulating supply. Hackers deposited 89,567 unbacked rsETH as collateral across Aave and Compound, borrowing 82,650 WETH and 821 wstETH worth $82.65 million. The coalition’s strategy converts committed ETH into rsETH in controlled tranches, then liquidates hacker positions through governance-adjusted oracle prices. Major backers including Consensys, Joseph Lubin, Stani Kulechov, and Lido have pledged $303 million in total capital and credit to underwrite the recovery.
The Numbers
The plan targets reclaiming approximately 13,000 ETH from Aave’s Ethereum and Arbitrum markets and 16,776 ETH from Compound—totaling around 29,776 ETH. Hackers’ 89,567 unbacked rsETH collateral was used to borrow 82,650 WETH and 821 wstETH. The Arbitrum Security Council froze $71.5 million linked to the exploiter’s addresses. Commitments include up to 30,000 ETH from Consensys and Joseph Lubin, 5,000 ETH personally from Aave Labs CEO Stani Kulechov, and a 2,500 stETH proposal from Lido. The coalition warned that attacker interference could complicate accrual, requiring additional liquidation steps.
Why It Happened
The Kelp DAO exploit exposed a critical vulnerability allowing minting of unbacked rsETH, flooding lending markets with worthless collateral. Aave and Compound faced severe bad debt, threatening protocol stability. DeFi United’s coordinated response reflects the Ethereum community’s ethos of collective defense, championed by Lubin: “The Ethereum ecosystem has always been at its best when it moves together.” The technical plan uses ETH-to-rsETH conversion to absorb the bad debt while oracle adjustments enable precise liquidation of hacker positions, avoiding broad market disruption.
Broader Impact
This stands as one of DeFi’s largest coordinated recovery efforts, setting a precedent where industry giants unite to absorb losses rather than leaving users to bear them individually. It could bolster trust in lending protocols and demonstrate the power of rapid, collaborative governance in crisis. The success of this model may influence future responses to large-scale exploits across DeFi.
What to Watch Next
- Execution of the ETH-to-rsETH conversion in controlled tranches to avoid market impact.
- Governance votes on temporary oracle adjustments to liquidate attacker positions.
- Recovery and redistribution of the $71.5 million frozen by Arbitrum Security Council.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
