DeFi United, a coalition of blockchain projects and ecosystem participants, circulated a technical proposal on April 28 to address fallout from the Kelp DAO hack. The exploit created 116,500 unbacked rsETH tokens on April 18 after an attacker forged a bridge message, tricking the Ethereum system into releasing tokens without actual collateral. The proposal aims to restore rsETH backing and stabilize lending markets across Aave and Compound, which hold 107,000 of the compromised tokens in active positions.
How the Bridge Vulnerability Opened a $300M Hole
The attack exploited a vulnerability in rsETH’s bridge mechanism. An attacker forged a cross-chain message that convinced the Ethereum system to mint rsETH without corresponding ETH backing. These unbacked tokens then flowed into DeFi’s core lending infrastructure, where they were posted as collateral. The $300 million gap between actual reserves and token supply created systemic risk across Aave and Compound, two of crypto’s largest lending platforms. DeFi protocols depend on collateral integrity to function safely. When backing disappears, liquidation cascades can destabilize entire market segments.
The Re-Collateralization and Liquidation Strategy
DeFi United’s proposal centers on two mechanics: re-collateralizing rsETH with committed ETH from participating blockchain projects, and unwinding bad loans through controlled liquidation. The plan involves temporarily adjusting rsETH’s valuation on Aave to enable orderly exit from compromised positions. The process is designed to free approximately 13,000 ETH currently locked in Aave positions. According to the proposal statement, “rsETH backing is fully restored, and all affected markets are stabilized” once execution completes. The approach prioritizes preventing forced liquidations that could crater rsETH’s market price further.
Lending Market Stability and Systemic Contagion Risk
Aave and Compound have emerged as focal points for recovery efforts because they hold the majority of exploited collateral. Both platforms face pressure to prevent cascading liquidations that could spread risk to unrelated borrowers and lenders. The Kelp hack demonstrates how bridge vulnerabilities in single-asset protocols can compromise multi-protocol lending ecosystems. rsETH, a restaked Ethereum token, had become a popular collateral type before the exploit. Stabilizing these markets requires coordination across multiple platforms and projects, a complexity that DeFi United’s coalition structure is intended to manage.
Next Steps and Execution Timeline Unclear
DeFi United has not disclosed specific details about which blockchain projects committed ETH reserves or when the proposal moves to formal governance voting. The identity of coalition members remains partially undisclosed. Without a published execution timeline, the market faces continued uncertainty about when rsETH positions will unwind and how quickly lending market stability will return. Aave governance will likely need to approve the temporary rsETH valuation adjustment, introducing an additional approval gate before implementation can begin.
