Meta Description:
Kelp DAO and Aave begin restoring rsETH operations after the $292M exploit, with phased refills, stronger bridge security, and legal steps ongoing.
Subtitle:
Kelp DAO and Aave restart rsETH recovery with phased refills and tighter bridge security.
TLDR
- Kelp DAO and Aave start restoring rsETH after the $292M exploit
- rsETH recovery begins as Kelp prepares phased refills over two weeks
- Aave backs rsETH restoration after key recovery steps on Arbitrum
- Kelp tightens bridge security before reopening rsETH operations
- rsETH withdrawals may resume soon as recovery moves into final phase
Kelp DAO and Aave moved to restore rsETH operations after completing key recovery steps from the $292 million exploit. The protocols will refill 117,132 rsETH into the LayerZero OFT adapter over two weeks. The move marks a major step toward reopening withdrawals, deposits, redemptions, bridging, and claims.
Kelp DAO Prepares rsETH Refill
Kelp DAO said the refill will come from the Aave Recovery Guardian and Kelp Recovery Safe. The funds will move into the LayerZero OFT adapter on Ethereum mainnet in tranches. After the first tranche arrives, Kelp expects to unpause withdrawals within 24 hours.
The protocol said rsETH on mainnet and Layer 2 networks remains fully backed. However, normal operations will resume only after smart contracts become active again. These operations include deposits, redemptions, bridging, and user claims across supported networks.
Kelp also completed a security hardening review across its LayerZero bridge settings. The protocol now requires four independent attestors and 64 block confirmations for verification. Besides, it removed all Layer 2-to-Layer 2 routes to reduce cross-chain risk.
Aave Advances Recovery Plan
Aave confirmed that it completed the first recovery steps linked to the exploit. The process included burning the exploiter’s rsETH on Arbitrum after recovery coordination. The protocol can now support the phased refill into the mainnet adapter.
The April 18 exploit drained 117,132 rsETH and disrupted several DeFi markets. The attacker moved part of the stolen assets into Aave as collateral for WETH. That action created about $190 million in bad debt for the lending protocol.
Aave later helped form DeFi United to contain wider market damage. The coalition raised more than $300 million in ETH commitments from major DeFi groups. Hence, the recovery plan gained enough support to cover the rsETH backing gap.
Legal Dispute Remains Open
The Arbitrum Security Council froze about 30,766 ETH linked to the attacker on April 20. Those funds were expected to support the DeFi United recovery effort. However, a U.S. court dispute later delayed the transfer process.
Plaintiffs with terrorism judgments against North Korea sought control of the frozen ETH. They argued that Lazarus Group carried out the exploit for the North Korean regime. Aave challenged the order and argued that stolen assets should return to affected users.
A Manhattan court later allowed Arbitrum to transfer ETH to an Aave-controlled wallet. Yet Aave cannot sell or move those funds without further court approval. Meanwhile, Kelp is shifting rsETH bridging from LayerZero to Chainlink CCIP for stronger protection.
