DeFi Protocols Pledge 43,500 ETH to Recover from $293M Kelp Exploit

In a unified effort to stabilize the decentralized finance (DeFi) ecosystem after the $293 million Kelp DAO exploit, protocols have pledged over 43,500 ETH—worth about $101 million as of April 24. The initiative, termed the “DeFi United” relief effort by Aave, aims to restore the backing of rsETH, which was severely impacted by the exploit, and prevent broader market contagion.

The hack, which occurred on April 18, exploited a vulnerability in Kelp DAO’s LayerZero-powered bridge, allowing attackers to mint unbacked rsETH on Ethereum. They then used the tokens as collateral to borrow massive amounts of wrapped ETH on lending platforms like Aave, creating $195 million in bad debt. The incident not only left Kelp DAO reeling but also sent ripples through at least nine other DeFi protocols.

Who’s Stepping Up?

Aave, a major player in DeFi lending, has committed resources to coordinate recovery efforts alongside other protocols. Ethereum layer-2 network Mantle has proposed lending up to 30,000 ETH to Aave DAO in exchange for yield. The EtherFi Foundation has pledged 5,000 ETH, while the Golem Foundation and Golem Factory are jointly contributing 1,000 ETH.

Lido DAO, a leader in liquid staking, has offered up to 2,500 stETH as a conditional contribution, emphasizing the need for a coordinated recovery package to close the deficit. Aave founder and CEO Stani Kulechov has personally pledged 5,000 ETH, underscoring the gravity of the situation.

Other contributors include LayerZero, Ink Foundation, Tyrdo, and Frax Finance, though their commitments remain undisclosed. As of now, efforts are ongoing to formalize additional contributions and finalize the recovery plan.

A Fragile Market Reacts

The Kelp DAO exploit has reignited concerns over DeFi security, particularly around cross-chain bridges. The vulnerability exploited by the attacker stemmed from Kelp DAO’s use of a single-validator node setup—a glaring single point of failure. LayerZero, whose technology underpinned the bridge, has distanced itself by pointing to Kelp DAO’s insecure implementation.

In the days following the attack, Arbitrum froze 30,766 ETH tied to the exploit, but blockchain analysts report that 75,700 ETH have already been laundered by the attacker. The North Korea-linked Lazarus Group is suspected to be behind the hack, though investigations are ongoing.

The exploit has also raised questions about DeFi’s interconnectedness. Aave, for instance, saw its total value locked (TVL) drop by $8 billion, highlighting the domino effect such incidents can have across the sector. As a result, ETH’s price has remained under pressure, trading at $3,350 as of April 24, down 0.5% over the past 24 hours.

The Road Ahead

While the pledges signify strong community collaboration, significant challenges remain. With the hacker laundering a substantial portion of stolen funds, the recovery effort relies heavily on pledged contributions and coordinated action to plug the liquidity gap. Lido’s proposed $5.8 million stETH injection alone underscores the scale of funds needed to stabilize the system.

Broader discussions about DeFi security are also gaining momentum. The Kelp DAO exploit has exposed critical flaws in bridge configurations and highlighted the systemic risks of highly interconnected protocols. Industry leaders are now calling for more rigorous security audits and governance measures to mitigate such vulnerabilities in the future.

For traders, the immediate focus is on the recovery plan’s execution and its impact on ETH liquidity. Any prolonged instability could weigh further on market sentiment, making this a key situation to monitor in the coming weeks.

Image source: Shutterstock