Aave Completes First Phase of rsETH Technical Recovery, Begins Liquidity Restoration

Aave (AAVE) announced the successful completion of the first phase of technical recovery for rsETH, the liquid restaking token affected by a security incident at KelpDAO. The project confirmed it has burned the rsETH tokens held by the hacker on the Arbitrum (ARB) network, marking a critical step in restoring normal operations.

Recovery Phase Details and Next Steps

According to Aave’s official update, the initial recovery phase focused on neutralizing the attacker’s holdings. By burning the compromised rsETH on Arbitrum, the protocol has removed the immediate threat posed by the stolen tokens. Moving forward, Aave plans to gradually supply liquidity to the LayerZero (ZRO) OFT adapter, a cross-chain messaging bridge, to facilitate the safe return of funds and prepare for the resumption of rsETH services.

The recovery process will be sequential. Aave has indicated that services related to rsETH will be restored in a phased manner, prioritizing security and stability. This measured approach is designed to prevent further exploits and ensure that all protocol interactions are safe for users.

Background: The KelpDAO Incident

This recovery effort follows a previously announced response plan from Aave after a hacking incident at KelpDAO, a liquid restaking platform. The exploit targeted rsETH, a token that represents staked ETH on the Kelp protocol. While Aave itself was not directly breached, the incident affected the rsETH market on Aave’s platform, requiring the project to take proactive measures to protect user funds and maintain market integrity.

Implications for DeFi and Cross-Chain Security

The incident highlights ongoing challenges in the decentralized finance (DeFi) sector, particularly around cross-chain interoperability and liquid staking tokens. Aave’s response — burning compromised tokens and using LayerZero’s OFT adapter for recovery — demonstrates a growing maturity in handling security incidents within the ecosystem. For users, the phased resumption of services signals that Aave is prioritizing safety over speed, a stance that reinforces trust in the protocol’s governance and technical team.

Conclusion

The completion of the first phase of rsETH recovery is a positive development for Aave and its users. By neutralizing the hacker’s holdings and outlining a clear path forward, Aave has taken decisive action to contain the fallout from the KelpDAO incident. The gradual restoration of liquidity and services will be closely watched by the DeFi community as a test case for incident response in multi-chain environments.

FAQs

Q1: What is rsETH?
rsETH is a liquid restaking token issued by KelpDAO, representing staked ETH that can be used across various DeFi protocols, including Aave.

Q2: Was Aave directly hacked?
No. The exploit occurred at KelpDAO, affecting rsETH tokens. Aave’s recovery actions are a response to protect its users and the integrity of its markets.

Q3: When will rsETH services fully resume?
Aave has not provided a specific timeline. The project is taking a phased approach, gradually supplying liquidity and restoring services after each step is verified as safe.