Aave Rallies $101M Ether Rescue After Kelp DAO Exploit

The Kelp DAO exploit has triggered the largest voluntary rescue package DeFi has put together in years. More than 43,500 Ether, worth roughly $101 million, has been pledged by protocols scrambling to plug the hole left in rsETH’s backing after attackers gutted Kelp’s bridge on April 18. Aave is running point on the effort. The rest of the industry is lining up behind it, and the rollcall is starting to look less like a bailout and more like a referendum on whether DeFi can clean up after itself without a central authority in the room.

How the Kelp DAO Exploit Blew a $195 Million Hole in DeFi

The short version: attackers drained 116,500 rsETH from Kelp’s LayerZero bridge, worth about $293 million at the time. They did not sell. They borrowed. The stolen rsETH was deposited on Aave v3 as collateral, then used to borrow wrapped Ether against it, which left roughly $195 million in bad debt sitting on Aave’s books once the collateral was revealed to be worthless.

That is the part that makes this case different from a standard bridge heist. The attackers weaponized DeFi’s composability against itself. They turned Kelp’s bridge into a vending machine and Aave into the clearing house. By the time markets caught up, the synthetic collateral had already paid out in real ETH. Chainalysis lays out the mechanics in its forensic write-up on the Kelp DAO exploit, and the trail confirms what on-chain sleuths suspected within hours: this was engineered, not stumbled into.

The knock-on damage spread fast. rsETH trades at a steep discount to ETH the moment the market realizes the backing has been compromised. Lending pools that accepted rsETH as collateral across Ethereum, Arbitrum, Base, Mantle, and Linea started showing stress. Liquidation bots got confused. Borrowers got nervous. And Aave, which had the largest exposure, had to decide fast whether to eat the loss or try to stitch the backing back together.

What Is DeFi United and Who Is Actually Writing Checks?

The pledge board, ranked by size

DeFi United is the name Aave slapped on the coordinated relief effort, and it is doing real work. As of this week, commitments exceeding 43,500 ETH have been logged from more than half a dozen major protocols. Aave announced the structure and running tally through its official channels, including the pinned post detailing the DeFi United framework.

The pledges are not equal. Some are loans. Some are grants. Some are conditional. But all of them are aimed at the same thing: putting Ether back behind rsETH so holders can exit at something close to par.

“We believe ecosystem collaboration matters most in moments like this, and our priority is achieving the strongest possible available outcome for users,” Aave said in the announcement. “Multiple strong indicative commitments are now in place to join this effort toward restoring the backing of rsETH.”

We believe ecosystem collaboration matters most in moments like this, and our priority is achieving the strongest possible available outcome for users.

• Mantle: up to 30,000 ETH, structured as a loan to the Aave DAO in exchange for yield
• EtherFi Foundation: 5,000 ETH committed
• Stani Kulechov (Aave founder, personal pledge): 5,000 ETH
• Lido DAO: conditional pledge of up to 2,500 stETH through a dedicated vehicle
• Golem Foundation and Golem Factory: 1,000 ETH jointly
• LayerZero, Ink Foundation, Tyrdo, Frax Finance: contributions signaled, sizes not yet disclosed

Lido’s Conditional Pledge Is the One to Watch

Of the commitments on the board, Lido’s is the most politically loaded. Lido does not usually put treasury ETH to work propping up a direct competitor in the liquid restaking category. rsETH is, in plain language, a rival product. And yet Lido DAO has signed off on routing up to 2,500 stETH into the rescue through a purpose-built vehicle, with the decision and its rationale posted publicly in the Lido DAO rsETH relief forum thread.

The thinking, per Lido, is that a cascading rsETH failure does not stay inside Kelp. It bleeds into every pool that touched the token, and it damages the reputation of every liquid staking derivative on the market. Better to spend a few thousand stETH now than to explain to regulators next month why the entire LSD category took a coordinated haircut.

“The proposal is designed to reduce broader ecosystem spillover and support an orderly resolution for affected users,” Lido DAO said.

Call it enlightened self-interest. Call it a peace offering. Either way, it sets a precedent. The next time a restaking protocol gets hit, the playbook for cross-protocol rescue is already drafted, and the receipts are on-chain.

The proposal is designed to reduce broader ecosystem spillover and support an orderly resolution for affected users.

How Much of the Stolen ETH Can Actually Be Recovered?

This is where the rescue math runs into reality. The Arbitrum security council moved earlier in the week to freeze 30,766 ETH tied to the exploiter’s addresses on Arbitrum, which is a meaningful chunk of the stolen pile. That is money that will not move, at least not until a governance decision unlocks it.

But blockchain analysts tracking the flows say roughly 75,700 ETH linked to the attack has already been laundered through a combination of mixers, cross-chain bridges, and fragmented swaps. That portion is functionally gone. Not gone forever. Forensics firms will keep tagging wallets for years. But gone from the standpoint of whether it can be returned in time to matter for this recovery.

So the gap the pledges are trying to close is not the full $293 million headline. It is the net hole after frozen funds, after whatever Aave recovers through liquidations of other collateral, and after any portion of the stolen rsETH that can be clawed back through legal or technical means. The real number is fuzzy, but the working estimate inside the DeFi United negotiations is closer to $195 million of exposed bad debt, which is exactly the figure the 43,500 ETH pledge pool is sized to cover.

Aave Paused rsETH Reserves Across Five Chains. Here Is Why.

Within hours of the exploit being confirmed, Aave paused rsETH reserves on Ethereum, Arbitrum, Base, Mantle, and Linea. No new borrows against rsETH. No new deposits. Existing positions locked in place while the recovery team maps the damage.

“This was done with the objective of recovering additional funds as the recovery plans progress. We will keep the community updated on the next steps as the efforts continue,” the platform said.

The pause is defensive but it is also a signal. Pausing a collateral type on five chains simultaneously tells the market that Aave is treating this as a protocol-level event, not a single-chain incident. That matters for the downstream pools, the integrators, and the aggregators that route user funds. Everyone gets the same message at the same time, which reduces the odds of a bank-run dynamic where users on one chain race to exit before users on another.

What This Means for rsETH Holders and the Restaking Sector

If the full $101 million pledge pool closes and converts into actual transferred Ether, rsETH holders get something close to a whole exit. They will not get par overnight. The token will likely trade at a discount for weeks while the rescue vehicles deploy funds and the legal track plays out. But the backing gets rebuilt, and the protocol keeps breathing.

If the pledges slip, or if Kelp DAO governance refuses terms, or if Aave’s DAO votes down the loan structure with Mantle, the fallback scenarios are uglier. Partial backing means a permanent haircut for rsETH holders. A permanent haircut means every other liquid restaking token gets re-priced on risk. And the restaking narrative, which has been one of the loudest growth stories in DeFi for two years, takes a real hit.

The broader lesson that keeps coming up in the postmortems: restaking stacks risk. LayerZero bridges restaking tokens. Aave accepts them as collateral. Lending pools compound the exposure. When one link breaks, the entire chain gets tested at once. DeFi United is a creative response to that fragility, but it is also a reminder that the fragility is baked in, not a bug.

Stani Kulechov’s personal 5,000 ETH pledge is the kind of gesture that matters more than the dollar amount. Founders putting their own money on the table in a crisis buys credibility that no treasury line item can. It also sets an expectation. The next time a major DeFi protocol takes a hit, the market will remember who showed up.

What Happens Next With the DeFi United Recovery?

Negotiations are still live. The list of contributors is still growing. Aave has said more commitments are being finalized with partners, and several protocols that have signaled support (LayerZero, Ink Foundation, Tyrdo, Frax Finance) have not yet disclosed sizes. The working timeline inside the relief group targets closing the initial pledge round inside two weeks, with deployment of funds to rebuild rsETH backing starting immediately after.

The recovery also depends on what Arbitrum’s security council does with the frozen 30,766 ETH. A governance proposal to return those funds to the relief pool is the cleanest outcome. A prolonged legal fight over custody is the messiest. Either way, that pool of frozen Ether is the single biggest variable left on the board.

For now, the pledge tracker keeps ticking up and the rsETH market keeps waiting. Whether DeFi United closes the gap or falls short will be the case study every restaking protocol, bridge operator, and lending market references for the next cycle.

This article is for informational purposes only and does not constitute investment advice. Every investment and trading decision involves risk. Readers should conduct their own research before making any financial decisions.