# AAVE İlgili Makaleler

HTX Haber Merkezi, kripto endüstrisindeki piyasa trendleri, proje güncellemeleri, teknoloji gelişmeleri ve düzenleyici politikaları kapsayan "AAVE" hakkında en son makaleleri ve derinlemesine analizleri sunmaktadır.

Day 6 of the rsETH Incident: DeFi United Secures Approximately $100 Million in Intentional Commitments, but a $50 Million Gap Remains

On April 18, Kelp DAO’s rsETH LayerZero bridge was exploited, resulting in the unauthorized minting of 116.5k rsETH (approx. $292M). The attacker borrowed around $190M on Aave V3. The Arbitrum Security Council froze 30,766 ETH linked to the incident. DeFi United, a cross-protocol rescue initiative led by Awe, was formed to cover a total shortfall of 112.2k rsETH ($258M). As of April 24, several protocols have pledged around $100M in support, though most commitments are still under DAO voting or discussion. Key pledges include: - Golem: 1,000 ETH ($2.3M) - Aave founder Stani Kulechov: 5,000 ETH ($11.5M) - EtherFi: up to 5,000 ETH ($11.5M) - Lido: up to 2,500 stETH ($5.75M), contingent on full coverage - Mantle: proposed a $69M loan to Aave DAO under specific terms The remaining shortfall is estimated at $50M. Aave’s treasury and safety module (~$236M combined) can cover the worst-case bad debt scenario ($230M). Three potential loss distribution paths were outlined by DefiLlama’s 0xngmi: 1. Uniform 18.5% haircut for all rsETH holders: Aave bad debt ~$216M 2. Only protect Mainnet, abandon L2: bad debt up to $341M 3. Repay only pre-attack holders: technically difficult, ~$91M net loss KelpDAO has not yet announced a specific plan. The success of DeFi United depends heavily on KelpDAO’s final decision on loss allocation.

marsbit04/24 11:26

Day 6 of the rsETH Incident: DeFi United Secures Approximately $100 Million in Intentional Commitments, but a $50 Million Gap Remains

marsbit04/24 11:26

Aave Is Surrendering the Throne of DeFi Lending Due to Its Own Stupidity

Aave, a leading DeFi lending protocol, is facing a severe crisis and losing its dominant market position due to its poor handling of a recent security incident. The crisis began when Kelp DAO suffered a hack resulting in a loss of $292 million in rsETH. In the aftermath, approximately $17.2 billion in funds flowed out of Aave as user panic escalated. The article criticizes Aave's crisis management as "extremely foolish." Instead of promptly offering reassurance or committing to cover the potential bad debt—estimated between $123.7 million and $230.1 million, which Aave could have afforded—the protocol initially deflected blame, emphasizing that its code was not at fault. This delay and lack of a clear guarantee led to widespread user anxiety, triggering a bank run-like scenario where users withdrew funds or borrowed aggressively from other pools, causing liquidity shortages. Meanwhile, Aave’s competitor Spark—a fork of Aave’s own code—has benefited significantly. Having removed support for rsETH months earlier, Spark avoided any losses from the incident and has since seen its TVL grow by nearly $2 billion, attracting major deposits such as over $1.24 billion from Justin Sun. Spark has actively capitalized on the situation, publicly criticizing Aave’s security reputation. Although Aave’s founder Stani eventually announced a relief plan named "DeFi United" with several partners and a personal donation, the damage to user trust and capital outflows may be irreversible. The article concludes that Aave is losing its throne in DeFi lending to aggressive competitors like Spark, Morpho, and Jupiter Lend.

Odaily星球日报04/24 02:38

Aave Is Surrendering the Throne of DeFi Lending Due to Its Own Stupidity

Odaily星球日报04/24 02:38

The $290 Million Deficit: A Three-Way Game Between Aave, L0, and Kelp—Who Should Foot the Bill?

An incident involving the theft of 116,500 rsETH (worth approximately $290 million) from Kelp DAO’s cross-chain bridge contract has triggered a complex dispute over responsibility and compensation among Kelp DAO, LayerZero, and Aave. The attack occurred due to a compromised RPC provider used by LayerZero’s Decentralized Verifier Network (DVN). Since Kelp DAO’s bridge used a 1/1 DVN configuration—a single point of failure—the attacker successfully forged a cross-chain message, leading to the unauthorized release of rsETH tokens from the mainnet. These genuine tokens were then deposited into Aave and other lending platforms to borrow WETH, enabling the attacker to exit with the funds. Responsibility is attributed primarily to Kelp DAO for its risky 1/1 DVN setup. LayerZero bears secondary responsibility for permitting such a vulnerable configuration in its protocol layer. Aave also shares indirect blame for over-collateralizing rsETH and other Liquid Restaking Token (LRT) assets without adequate ongoing risk oversight. Kelp DAO lacks sufficient funds to cover the loss, shifting focus to the deeper-pocketed players: LayerZero, whose cross-chain ecosystem and reputation are at risk, and Aave, which faces massive bad loans and declining Total Value Locked (TVL). Aave has asserted that mainnet rsETH remains fully backed, implying it expects Kelp DAO to allow redemption of underlying ETH. This approach would preserve Aave’s mainnet positions but invalidate Layer2 rsETH, damaging LayerZero’s cross-chain credibility. Potential solutions include: - A universal 18.5% haircut on all rsETH holders, causing significant Aave bad debt. - Writing off Layer2 rsETH entirely, protecting Aave mainnet but harming LayerZero and Kelp DAO. - Negotiating a bounty with the hacker for partial fund return. - A joint bailout, possibly led by LayerZero’s ecosystem fund, given its long-term stake in the cross-chain ecosystem. The situation remains unresolved as the parties negotiate, but prolonged delay risks broader DeFi instability, including potential liquidity crises and loss of confidence in LRT and cross-chain infrastructures.

Odaily星球日报04/20 08:52

The $290 Million Deficit: A Three-Way Game Between Aave, L0, and Kelp—Who Should Foot the Bill?

Odaily星球日报04/20 08:52

On the Same Day Aave Introduced rsETH, Why Did Spark Choose to Exit?

On April 18, Kelp DAO's cross-chain bridge was exploited, resulting in the malicious minting of 116,500 unbacked rsETH. The attacker deposited these into Aave and borrowed WETH, creating a potential bad debt of approximately $195 million. Aave’s Guardian quickly froze the market, but the protocol’s insurance could only cover about 25% of the loss. In contrast, SparkLend, a lending protocol in the MakerDAO ecosystem, suffered no direct losses. This was not due to superior foresight but rather a preemptive governance decision. On January 29, Spark executed a governance action to discontinue new rsETH supply, citing low usage and high concentration from a single wallet. The same day, Aave expanded its rsETH market by enabling E-Mode with a 93% LTV to attract more deposits. Spark’s risk management framework is designed to remove assets with low usage or poor risk-adjusted returns, regardless of external security concerns. Aave’s decision was growth-oriented, aiming to boost WETH utilization and attract capital. Spark also employs additional safeguards: rate-limited supply and borrow caps that would have limited the scale of such an attack, and a robust oracle system using the median of three price feeds. These mechanisms systemically contain the maximum exposure to any single risk event, demonstrating a fundamentally different approach to risk than Aave’s growth-first model.

marsbit04/20 08:14

On the Same Day Aave Introduced rsETH, Why Did Spark Choose to Exit?

marsbit04/20 08:14

活动图片