Day 6 of the rsETH Incident: DeFi United Secures Approximately $100 Million in Intentional Commitments, but a $50 Million Gap Remains

marsbitОпубликовано 2026-04-24Обновлено 2026-04-24

Введение

On April 18, Kelp DAO’s rsETH LayerZero bridge was exploited, resulting in the unauthorized minting of 116.5k rsETH (approx. $292M). The attacker borrowed around $190M on Aave V3. The Arbitrum Security Council froze 30,766 ETH linked to the incident. DeFi United, a cross-protocol rescue initiative led by Awe, was formed to cover a total shortfall of 112.2k rsETH ($258M). As of April 24, several protocols have pledged around $100M in support, though most commitments are still under DAO voting or discussion. Key pledges include: - Golem: 1,000 ETH ($2.3M) - Aave founder Stani Kulechov: 5,000 ETH ($11.5M) - EtherFi: up to 5,000 ETH ($11.5M) - Lido: up to 2,500 stETH ($5.75M), contingent on full coverage - Mantle: proposed a $69M loan to Aave DAO under specific terms The remaining shortfall is estimated at $50M. Aave’s treasury and safety module (~$236M combined) can cover the worst-case bad debt scenario ($230M). Three potential loss distribution paths were outlined by DefiLlama’s 0xngmi: 1. Uniform 18.5% haircut for all rsETH holders: Aave bad debt ~$216M 2. Only protect Mainnet, abandon L2: bad debt up to $341M 3. Repay only pre-attack holders: technically difficult, ~$91M net loss KelpDAO has not yet announced a specific plan. The success of DeFi United depends heavily on KelpDAO’s final decision on loss allocation.

Kelp DAO's rsETH LayerZero bridge was attacked on April 18, resulting in the unauthorized minting of 116,500 rsETH (approximately $292 million). The attacker subsequently borrowed approximately $190 million worth of assets on Aave V3, and the Arbitrum Security Council froze 30,766 ETH involved at the chain level.

The DeFi United mechanism, led by Aave and centered on cross-protocol joint rescue efforts, was immediately established with the goal of filling the total gap of 112,200 rsETH (approximately $258 million).

As of April 24, multiple protocols have publicly stated their participation in DeFi United, with intentional commitments totaling approximately $100 million. However, most are still in the DAO voting stage, forum discussion, or earlier pre-discussion phases.

Disclosed Funding Parties and Terms

Golem Foundation and Golem Factory have collectively allocated 1,000 ETH (approximately $2.3 million) from their treasury to restore rsETH collateral support and the orderly disposal of affected users. Golem stated that they have been working closely with the Aave team, and this funding is part of DeFi United's cross-protocol coordinated response to risks.

Aave founder Stani Kulechov personally committed 5,000 ETH (approximately $11.5 million) to support DeFi United. Stani stated in a tweet that Aave is his life's work, the team is fully committed to finding the most beneficial solution for users, and is working with partners to secure more funding commitments. Personal funding does not go through the DAO voting process and is a direct commitment.

EtherFi Foundation authorized the deployment of up to 5,000 ETH (approximately $11.5 million) from the DAO treasury as EtherFi's share in the cross-protocol joint rescue, to absorb user losses and prevent bad debt in lending markets like Aave.

The terms are constrained to automatically stop the program after the rescue is completed, the 5,000 ETH upper limit is reached, or a subsequent governance vote terminates it; unused portions will be returned to the DAO treasury; if compensation is later obtained through legal proceedings, insurance payouts, or on-chain recovery, returned funds will be repaid to the DAO within the funding amount. The foundation committed to releasing the rescue framework and allocation mechanism details within 7 days after the proposal is passed.

Lido DAO proposed funding up to 2,500 stETH (approximately $5.75 million) to a dedicated rescue vehicle, bridged and transferred through a multi-signature wallet operated by Lido Labs Foundation. This allocation will only be released if the rescue fund is fully subscribed, sufficient to completely cover the rsETH gap.

Lido argued that if only part of the gap is covered, its EarnETH treasury depositors would still face a loss exposure of up to approximately 9,000 ETH, therefore refusing to unilaterally fund a partial rescue structure. The rescue vehicle's authorization is limited to filling the rsETH gap itself and not for supporting position health factors, secondary loss capital reset, and other second-order effects. This allocation is independent of the EGG 2026 budget, and unused or recovered funds will be returned to the Lido Aragon Agent. The proposal has not yet entered the Aragon on-chain voting stage.

Mantle drafted a proposal for Mantle Treasury to provide a loan of up to 30,000 ETH (approximately $69 million) to Aave DAO, with interest calculated at LIDO yield +1% APR, a maximum term of 36 months, and no penalty for early repayment.

The terms require Aave DAO to provide collateral of no less than $11 million worth of AAVE tokens plus 5% of future protocol revenue, with funds entering a multi-signature wallet where Mantle holds first-priority rights, while delegating voting rights for 130,000 AAVE tokens to Mantle. Mantle positioned this in the draft as a fixed-income tool priced at a crisis-period premium and hopes to promote Aave's native deployment on the Mantle network.

Several other protocols have publicly expressed participation but have not disclosed amounts, including Ethena, LayerZero, INK Foundation, etc.

Aave's Own Funds May Cover the Bad Debt Upper Limit

Based on current intentional commitments and the total gap, DeFi United's remaining gap is approximately $50 million. Even if external commitments stop at the current level, the Aave protocol itself has sufficient buffers. The Aave treasury holds approximately $180 million in assets, and the Umbrella security module holds approximately $56 million in insurance funds, totaling about $236 million, which already covers the upper limit of the bad debt range of $123.7 million to $230.1 million calculated by LlamaRisk.

Aave partially unfroze the previously emergency-frozen WETH market. The approximately $300 million borrowing squeeze that occurred in the early stages of the attack has largely eased, and the AAVE token has begun to stabilize after an initial decline of over 25%. From the perspectives of protocol self-rescue and market sentiment, the systemic risk of the event has moved away from the most critical stage.

However, Spark Strategy Lead monetsupply.eth criticized Aave's decision to unfreeze the core Ethereum WETH market in a tweet, calling it ill-considered and primarily beneficial to loop borrowers. He pointed out that since Aave's core Ethereum borrowing rate is capped at 5.15%, while LST/LRT offers higher returns under discounts and staking yields, arbitrageurs can achieve approximately 45% annualized returns through loop borrowing with up to 14x leverage.

This strategy would keep the WETH market utilization rate consistently at 100%, preventing ordinary aWETH holders from withdrawing collateral or refinancing high-cost debt positions to other markets. He further questioned whether the decision was more about public relations than sound risk management, actually worsening the situation for ordinary users trapped in the market over the past few days.

0xngmi's Three Paths: Vast Differences in Aave's Bad Debt Scale

The actual bad debt that Aave needs to absorb ultimately depends on KelpDAO's loss-sharing plan. DefiLlama founder 0xngmi conducted a complete numerical simulation of three possible paths, with each path having a huge impact difference on Aave.

Path One: All rsETH holders share the loss proportionally. KelpDAO imposes a uniform 18.5% reduction on all rsETH holders, a proportion corresponding to the share of the unauthorized minted 116,500 rsETH in the total circulation. Aave currently has approximately 666,000 rsETH as collateral across the network, with positions on the mainnet and L2 mostly in a state接近 maximum loop leverage (95% liquidation LTV).

Once socialized losses are implemented, the 18.5% reduction far exceeds the approximately 5% equity buffer of loop positions, and the equity of all positions on the mainnet and L2 will be completely wiped out, leading to large-scale liquidations. According to 0xngmi's calculations, the final bad debt沉淀 in Aave would be approximately $216 million, or 13.5% of the total collateral value.

The coverage structure for this bad debt is: the Umbrella insurance module covers approximately $55 million, the Aave treasury subsidizes approximately $85 million, leaving a gap of approximately $76 million. KelpDAO could cover the shortfall through borrowing or selling AAVE tokens held by the Aave treasury (current market value approximately $51 million). This plan shares the loss among all users, has a controllable impact on the Aave single market, but directly reduces the equity of rsETH holders.

Path Two: Abandon L2 holders, only protect the mainnet. KelpDAO chooses to repay only mainnet rsETH holders at the original value, treating rsETH on L2 as worthless assets. The scale of rsETH collateral on Aave's L2 is approximately $359 million (priced at the parity used by the oracle). If all positions are at maximum loop leverage, the bad debt would directly膨胀 to $341 million.

In this scenario, the Umbrella insurance module cannot cover any L2 bad debt. Aave can only use treasury or external borrowed funds to rescue部分 markets. The rsETH markets on the chains with the largest losses, Arbitrum, Mantle, and Base, are most likely to be abandoned and collapse. This plan has a relatively small direct impact on Aave's mainnet but would severely damage L2 ecosystem credibility and could trigger a trust contraction across the entire L2 restaking track. For Mantle, its own L2 rsETH market would directly崩盘 in this scenario, and the rationale for its 30,000 ETH loan proposal would also be反噬.

Path Three: Repay only original holders based on pre-attack snapshot. KelpDAO attempts to fully repay only rsETH holders before the attack based on a snapshot, with subsequent buyers or transferees bearing the losses themselves. Theoretically, this can compress the loss to the smallest range, but actual execution is extremely complex: funds have flowed extensively between DeFi protocols after the attack, and the nature of lending and liquidity pools is a mixed fund pool, making it impossible to truly distinguish between different batches of depositors.

In terms of specific bad debt calculation, the hacker borrowed $124 million on the Aave mainnet and $18 million on Arbitrum, totaling $142 million; after deducting Umbrella coverage, there is still a net loss of approximately $91 million. This plan has the smallest theoretical loss but is almost impossible to execute technically, and is also prone to long-term controversy legally and community-wise. 0xngmi judged its probability of implementation to be extremely low.

Among the three paths, Aave's net loss ranges from $76 million, $91 million, to $341 million, showing orders of magnitude differences. KelpDAO's choice of plan determines whether Aave ultimately needs to use all its treasury resources.

Rescue funds have gathered around Aave, but the key switch for the plan's success lies in KelpDAO's hands.

On the afternoon of April 23, KelpDAO issued a statement reiterating the core principle of always putting users first, stating that the team and partners have made substantial progress on multiple paths over the past four days, and publicly thanking the Arbitrum Security Council for the on-chain freeze and SEAL 911 for early intervention in the investigation. KelpDAO did not disclose specific plans, timelines, or loss-sharing details, only承诺 to continue sharing specific updates through official channels.

The current DeFi United rescue plan is gathering around Aave, and the structure of intentional commitments from various protocols implies Path One as the baseline scenario. If KelpDAO moves towards other paths, the narrative of Mantle's 30,000 ETH loan, the sharing比例 of EtherFi and Lido, and even the entire rescue framework would need to be recalculated.

Связанные с этим вопросы

QWhat was the total amount of rsETH that was fraudulently minted in the Kelp DAO LayerZero bridge attack on April 18th, and what was its approximate USD value?

A116,500 rsETH was fraudulently minted, with an approximate value of $292 million.

QWhat is the name of the cross-protocol joint rescue mechanism that was established, and what is its stated goal in terms of the rsETH shortfall it aims to cover?

AThe mechanism is called DeFi United. Its stated goal is to cover a total shortfall of 112,200 rsETH, which is approximately $258 million.

QAs of April 24th, what was the total amount of intended commitments to the DeFi United rescue fund, and how much of a shortfall remained?

AThe total intended commitments were approximately $100 million, leaving a remaining shortfall of about $50 million.

QAccording to the analysis by DefiLlama founder 0xngmi, what are the three potential paths for KelpDAO's loss allocation, and which path results in the smallest net loss for Aave?

AThe three paths are: 1) All rsETH holders share the loss proportionally. 2) Only Mainnet holders are made whole, abandoning L2 holders. 3) Only pre-attack snapshot holders are repaid. Path 1 results in the smallest net loss for Aave, estimated at $76 million.

QWhat two primary sources of internal funds does Aave have to cover potential bad debt, and what is their combined approximate value?

AAave has its Treasury, holding approximately $180 million in assets, and the Umbrella safety module, holding approximately $56 million in insurance capital. Their combined value is approximately $236 million.

Похожее

Xiaohongshu's Second Great Voyage, This Time Sailing Towards AI

Xiaohongshu's Second Voyage: Navigating Towards AI Since ChatGPT's emergence, Xiaohongshu's founder Mao Wenchao has been acutely aware of AI's potential threat, recognizing that the life advice people seek from chatbots overlaps directly with his platform's core business. Founded in 2013 as a PDF shopping guide for Chinese tourists, Xiaohongshu evolved into a massive community where millions share authentic, personal experiences—from product reviews to travel tips. This vast repository of "I've tried this" human judgment became its most valuable asset. However, the rise of AI, which delivers instant answers, challenges the very need for users to sift through numerous personal notes. Fearing its treasure trove of lived experience could become mere training data for others, Xiaohongshu is proactively adapting. In 2026, it established a dedicated AI division (Dots), launched RED Skill to turn user experiences into usable AI tools, and acquired the AI search product "Diandian." Its investments now extend to AI firms like MiniMax and hardware startups, moving upstream to address needs before they even become search queries. The platform's commercialization strategy is also evolving. With a newly acquired payment license and tools like the AIPS model to track consumer decision journeys, Xiaohongshu aims to seamlessly integrate recommendations with transactions, embedding commerce within AI-generated answers. Yet, a critical tension remains. While building smarter machines to organize and leverage its human experiences, Xiaohongshu must prevent AI from drowning out the authentic, flawed, and trustworthy "I've tried this" voices that built its community. Its core challenge is to harness AI's power without letting the map—the machine's perfect, synthesized answer—replace the territory of genuine human experience. This balance between technological advancement and preserving human trust defines its current journey and its future.

marsbit3 мин. назад

Xiaohongshu's Second Great Voyage, This Time Sailing Towards AI

marsbit3 мин. назад

SharpLink CEO: How to Understand Ethereum Developers Just Exceeded 1 Million?

SharpLink CEO reflects on the milestone of Ethereum surpassing 1 million historical developers, emphasizing that this figure represents the largest pool of technical talent ever assembled around an open, permissionless blockchain network. While approximately 232,000 developers remain active, the key question for the crypto industry is not which chain is fastest, but where the best builders choose to build long-term. Ethereum's advantage lies in a decade-long accumulation of infrastructure, standards, tools, liquidity, and a cohesive culture, making it the default operating system for programmable finance. This developer base is tackling complex challenges: the Glamsterdam upgrade aims to enhance scalability while preserving core principles; synchronous composability seeks to unify Rollup ecosystems; and significant efforts are underway for post-quantum security. Ethereum's deeper network effects stem from composability and shared standards (like the EVM and Solidity), creating a flywheel of more developers, tools, and liquidity. Three reinforcing strengths cement Ethereum's lead: credible neutrality (secured by ~900k validators), a modular architecture with interconnected Rollups, and a culture that attracts top researchers. The ecosystem is consolidating as the trusted coordination layer for internet-native finance, favored by large institutions valuing security and liquidity. The future of Ethereum is being built by this global community of founders and architects.

链捕手18 мин. назад

SharpLink CEO: How to Understand Ethereum Developers Just Exceeded 1 Million?

链捕手18 мин. назад

A Clod of Chinese Soil Chokes Two Japanese Giants

"Chinese Soil Chokes Japanese Giants" The production of a key electronic specialty gas, tungsten hexafluoride (WF6), vital for manufacturing AI chips, was halted by two leading Japanese producers—Kanto Denka and Central Glass. Their shutdown was not due to a technological failure but a sudden, critical shortage of a raw material they had long taken for granted: ultra-high-purity (6N-grade) tungsten powder, which is almost entirely sourced from China. Following a quiet Chinese export announcement in January 2026, tungsten powder shipments to Japan dropped to zero for months. Despite frantic efforts, Japanese companies found no viable alternative; imported powder was three times more expensive and lacked the required purity. Their existing stockpiles were exhausted by mid-2026. WF6 is essential for depositing tungsten into the microscopic contact holes of High Bandwidth Memory (HBM) chips, which are crucial for advanced processors like those from Nvidia. While Japanese firms had mastered producing ultra-pure WF6 gas, their entire supply chain relied on China's 6N tungsten powder—a dependency now revealed as a fatal vulnerability. China's dominance in this "soil" results from decades of painstaking R&D by companies like Xiamen Tungsten and China Tungsten & Hightech. They overcame immense technical hurdles, such as separating chemically similar molybdenum from tungsten, to achieve mass production of the world's purest tungsten powder. With their primary suppliers gone, Kanto Denka and Central Glass announced a permanent halt to WF6 production starting July 1, 2026. This immediately created a supply crisis for major semiconductor manufacturers like Samsung and SK Hynix, forcing them to urgently seek and certify new Chinese suppliers for WF6 itself. The reversal marks a dramatic shift: China has moved from exporting low-value raw materials to controlling the high-purity foundation of a critical global tech supply chain, upending a long-established industrial hierarchy.

marsbit49 мин. назад

A Clod of Chinese Soil Chokes Two Japanese Giants

marsbit49 мин. назад

Торговля

Спот
Фьючерсы
活动图片