DeFi United has announced a coordinated recovery plan after the Kelp DAO exploit minted 116,500 unbacked rsETH and drained roughly $293 million from the system on April 18, 2026. The breach pushed Aave’s markets into severe stress, creating a cross-protocol collateral crisis that required emergency coordination across several major DeFi actors.
The exploit mattered because the unbacked rsETH did not remain isolated inside Kelp DAO. Attackers supplied the tokens as collateral into Aave V3, turning a bridge failure into a lending-market shock and forcing protocols to respond with freezes, pooled capital and governance-led recovery measures.
Unbacked rsETH Triggered Lending-Market Stress
The attack began with a 1-of-1 bridge that allowed the minting of unbacked rsETH. Those tokens were then supplied into Aave V3, where aggressive loan-to-value settings near 93% and efforts to expand rsETH liquidity amplified the damage.
On-chain estimates cited in the post-mortem placed bad debt between $124 million and $246 million. Several Aave markets reached 100% utilization, effectively freezing roughly $5 billion in stablecoin withdrawals and turning parts of the protocol into exit-only venues.
The shock quickly reached market structure. Aave’s Total Value Locked fell by approximately $6.6 billion, while its native token dropped about 16% in the immediate aftermath. The episode showed how quickly compromised wrapped assets can destabilize major lending venues when collateral parameters are too permissive.
Recovery Plan Relies on Pooled Capital and Governance
DeFi United’s recovery effort is designed to restore rsETH backing rather than directly subsidize individual lenders. The initiative pooled capital commitments from multiple ecosystem participants and will seek governance approvals to deploy funds across affected markets.
Recovery pledges totaled about $303 million, with more than 43,500 ETH committed. Aave pledged 25,000 ETH, while founder Stani Kulechov committed 5,000 ETH. LayerZero Labs pledged more than 10,000 ETH, Mantle Network committed about 30,000 ETH, and Arbitrum pledged approximately $215 million. Other listed participants included Ether.fi and Lido.
The funds are intended to restore rsETH backing, reduce bad debt across interlinked lending markets such as Aave and Compound, and support coordinated liquidations and liquidity injections. Protocols also implemented immediate containment measures, with Aave pausing rsETH markets across Ethereum, Arbitrum, Base and Mantle to limit additional exposure.
The incident highlights two recurring systemic risks in DeFi: compromised bridges that issue undercollateralized synthetic assets, and high LTV parameters that magnify losses when peg integrity fails. DeFi United’s response marks a shift toward collective crisis management, where pooled liquidity and governance coordination become tools for containing contagion.
The next steps are governance ratification, capital deployment, forensic tracing of stolen rsETH and technical audits of the bridge and risk parameters exposed by the attack. Those outcomes will determine the recovery rate for affected positions and whether DeFi protocols adopt stricter controls to prevent similar cascades.
