A coordinated industry rescue has raised $160 million to cover Aave's bad debt from the KelpDAO exploit, with total pledges exceeding $300 million after Consensys committed 30,000 ETH on Sunday.
Ten days after the KelpDAO bridge exploit left Aave holding up to $230 million in bad debt, a coordinated industry bailout has raised $160 million and attracted more than $300 million in total pledges — the largest collective rescue operation in DeFi's history.
The initiative, branded DeFi United and led by Aave's service providers, is attempting something that has never been tried at this scale: reconstructing the reserve backing of rsETH, the yield-bearing ether derivative that an attacker minted without collateral on 18 April. The exploit, attributed to North Korea's Lazarus Group, allowed the attacker to deposit nearly 90,000 unbacked rsETH tokens into Aave as collateral and borrow roughly $190 million in ETH and other assets before anyone noticed.
The contributors read like a roster of Ethereum's most capitalised institutions. Mantle offered up to 30,000 ETH as a three-year credit facility priced at the Lido staking yield plus one percentage point — structured, in effect, like a syndicated loan. Aave DAO proposed 25,000 ETH from its own treasury, with governance approval still in progress. Aave founder Stani Kulechov committed 5,000 ETH from his personal holdings. Ether.fi pledged 5,000 ETH. Lido offered 2,500 stETH. Smaller contributions have come from Ethena, Ink Foundation, Golem Foundation, Frax, Renzo, and the Avalanche and Solana foundations.
The most significant pledge arrived on Sunday. Consensys, the Ethereum software conglomerate led by Joe Lubin, committed up to 30,000 ETH — roughly $68 million at current prices — pushing the total commitments past $300 million. Much of that figure remains subject to governance votes and is not yet deposited.
DeFi United isn't buying the bad debt or compensating affected users directly. Instead, it's restoring the rsETH peg by injecting real ETH into the system to back the unbacked tokens that the attacker created. If the peg is restored, Aave's collateral positions become solvent again, and the bad debt effectively disappears. It's a technical fix, not a bailout in the traditional sense — nobody is writing a cheque to cover losses. They're reconstructing the asset that was destroyed.
The question that sits at the intersection of game theory and governance is obvious: why should Consensys or Mantle spend tens of millions of dollars to fix someone else's security failure? The answer, judging by the participation, is that Aave's bad debt is everyone's problem. Aave holds roughly $18 billion in deposits across Ethereum, Arbitrum, and other chains. If it can't resolve the rsETH shortfall, cascading liquidations could trigger contagion across every protocol that uses Aave as a liquidity layer. The participants aren't being charitable; they're protecting their own positions.
The Drift Protocol rescue earlier this month — where Tether led a $148 million recapitalisation after a separate North Korean exploit — established a template, but DeFi United is operating at more than double the scale and with far more participants. April's hack losses have now exceeded $606 million, and the industry's response has shifted from finger-pointing to damage control.
Aave has also moved to prevent a repeat. Its governance forum is debating a proposal to pause AAVE token buybacks and redirect the funds toward an insurance reserve, and a separate proposal would cap the share of any single wrapped or derivative asset that can serve as collateral on the platform. Neither proposal has reached a vote.
The $160 million raised so far covers roughly 80 per cent of the estimated shortfall. The remaining gap — somewhere between $40 million and $70 million depending on how losses are distributed across chains — is the subject of ongoing negotiations with protocols that hold significant rsETH exposure on Layer 2 networks. Mantle and Arbitrum bear the heaviest exposure.
DeFi United's technical proposal, published on Monday, outlines a phased re-pegging process that would take approximately 45 days to complete. The first tranche of ETH deposits is expected this week.
