title: [ARFC] rsETH Incident Funding Update
author: @TokenLogic
created: 2026-04-24
Summary
This publication presents to the Aave community, for discussion and vote, a proposal to have the Aave DAO provide financial assistance to restore the backing of Kelp DAO’s rsETH product following the April 18, 2026, bridge incident.
The Aave DAO’s participation forms part of a broader DeFi United recovery effort with ecosystem partners aimed at the orderly resolution of the rsETH backing shortfall. Early contributors to DeFi United include EtherFi, Lido, Mantle, Stani, Ethena, Ink Foundation / Tydro, Golem Foundation and Golem Project, Emilio, BGD Labs, Ernesto with more to come soon.
Further communication regarding the financial implications of this contribution to restoring rsETH users will be shared once the coordinated recovery plan has progressed further.
Motivation
Overview
On April 18, 2026, a vulnerability enabled an unauthorised release of rsETH from the Ethereum LayerZero adapter, breaking the cross-chain backing invariant between locked Ethereum collateral and remote-chain mints. A detailed account of the incident, the attacker’s on-chain footprint, and the resulting bad-debt scenarios is available in the rsETH Incident Report and in LlamaRisk’s follow-up analysis,.
Aave DAO service providers and other ecosystem participants are coordinating a recovery effort (called “DeFi United”) intended to close the remaining ETH backing shortfall and protect affected users across the Aave V3 deployments where rsETH and wrsETH were listed. This proposal is limited to the Aave DAO’s component of that effort.
No Ghost Left Behind
Aave has a long-standing commitment to protecting users during systemic events. Following the 2022 CRV short-squeeze incident, which resulted in 2,651,906 CRV of bad debt, which at the time represented roughly $1.9M, the DAO moved to cover the shortfall rather than socialise losses with suppliers. This proposal continues that posture.
The Aave DAO balance sheet is well-positioned to participate in a coordinated response. Participation supports the integrity of the Aave V3 markets affected by the incident (Ethereum, Arbitrum, Mantle), preserves depositor confidence in the WETH and LST markets, and demonstrates the DAO’s willingness to absorb a systemic event of this nature.
Recovery Effort
This ARFC lays out a credible path to making affected users whole, but it is important that the DAO approaches it with open eyes. The recovery depends on actions by parties outside the coalition’s control, including Kelp reopening withdrawals, LayerZero reopening the bridge, the Arbitrum Security Council, the Aave and Compound liquidation markets, that could play out over the coming weeks. The DeFi United coalition has assembled the best plan available with the information at hand, and the numbers in this document reflect the central case. They are not guaranteed. This is a call to arms: if each of the external pieces lands as expected, the outcome is a full make-whole of users with limited long-term exposure for the DAO, but the path there is not risk-free.
According to the Llamarisk report, the exploit resulted in the extraction of 152,577 rsETH from the LayerZero lockbox. At the prevailing ratio of 1.0696 rsETH per ETH, this represents an original shortfall of approximately 163,183 ETH. Coordinated action by multiple parties across the ecosystem has since reduced the outstanding gap materially:
- Kelp recovered and froze 40,373 rsETH, equivalent to approximately 43,168 ETH at the reference ratio. Following this action, the immediate hole stands at approximately 120,015 ETH.
- The Arbitrum Security Council successfully froze 30,766 ETH that the hacker was still holding on Arbitrum.
- The hacker’s remaining position on Aave can be liquidated. The delta between collateral and debt represents an expected recovery of up to 12,323 WETH.
- On the same basis, the hacker’s position on Compound yields an additional 1,845 WETH.
Combined, these four streams represent approximately 87,955 ETH of recovered or recoverable funds, equivalent to roughly 54% of the original shortfall. The residual funding gap that the coalition needs to bridge is therefore approximately 75,081 ETH.
Of the four recovery streams, only the Kelp freeze is immediately deployable as rsETH backing. The remaining streams, such as the Arbitrum Security Council release and the liquidation of the hacker’s positions on Aave and Compound, are recoverable in substance but not yet liquid, and could take several weeks.
Current Funding and Treasury Ask
The 75,081 ETH residual gap is being addressed through a combination of public contributions, a credit facility from Mantle, and a targeted contribution from the Aave DAO treasury. To date, EtherFi, Lido, Ethena, Ink, BGD Labs, Ernesto, Emilio, and Stani have committed contributions totalling 14,570 ETH, with conversations ongoing with additional ecosystem partners and further pledges expected in the coming hours. Alongside these, Mantle has committed a credit facility of up to 30,000 ETH to the coalition. Taken together with donations currently under discussion, the residual gap narrows to approximately 30,000 ETH. This ARFC requests authorization to deploy 25,000 from the Aave DAO treasury as the DAO’s contribution to the broader coalition effort, alongside the other funding streams already in place.
The 25,000 ETH treasury contribution is anchored: any additional public donations received after approval will not reduce the DAO’s commitment; instead, they will be applied to repay Mantle, reducing Aave’s aggregate exposure to external creditors rather than recalibrating the treasury outlay. This anchoring is deliberate. The DeFi United coalition must act immediately to make users whole, and indexing the treasury figure to a still-moving donation total would introduce delay and ambiguity at a moment that requires neither. Directing later contributions to the private loans principal further reduces the DAO’s indirect obligations once the recovery is complete, strengthening Aave’s balance sheet on the other side.
While the table above sets out the permanent funding stack against the 75,228 ETH residual gap, the coalition must in practice place the full 120,015 ETH into the LayerZero lockbox in order to execute the recovery, with the exact process and subsequent steps to be determined with the relevant parties. Approximately 44,787 ETH of that upfront amount corresponds to secured recoveries that are not yet liquid, namely the Arbitrum Security Council release and the Aave and Compound hacker position liquidations, and the conversion of those amounts into deployable ETH remains subject to timelines and processes outside the coalition’s control. To bridge this window, a separate tranche of short-duration loans is being arranged with additional ecosystem partners. Should those recoveries be delayed or ultimately fall short of the expected figures, the life of these loans would extend accordingly.
As recovery flows arrive at different times and with varying degrees of certainty, the coalition commits to returning to the DAO as each tranche materialises. Incoming proceeds will be applied first to the short-duration bridge loans and then to the longer-term facilities, in accordance with the repayment waterfall described above. The DAO will receive transparent accounting of each recovery event and the corresponding reduction in outstanding obligations, with a follow-up governance process initiated if the evolving structure warrants one. In the interim, continued fundraising from ecosystem partners remains an active coalition priority Every additional donation secured directly reduces the debt the DAO carries through the credit facilities and, by extension, the long-term load on Aave’s balance sheet. This ARFC authorises the initial capital commitment and establishes the DAO’s ongoing oversight of the recovery.
Specification
Voluntary Donation
The Aave DAO approves making the following funds available as a Donation from the treasury to support rsETH backing recovery, subject to the finalisation of the broader ecosystem’s DeFi United recovery plan.

Recovery Effort
This proposal authorises Aave Labs (or a designated affiliate acceptable to Aave Labs and the DAO) to act as counterparty on any loan, settlement, indemnity or related legal instrument on behalf of the Aave DAO, solely for the purpose of executing the recovery plan referenced above.
Supporting the recovery plan is anticipated to involve, but not be limited to, providing collateral such as Aave DAO assets and future Aave Protocol revenue, to secure various funding arrangements, such as under-collateralised loans, warrants, and potential token sales. To facilitate entering into such arrangements, assets held by the Aave DAO across SAFEs and Ecosystem Reserve are to be made available as and when required.
Refined figures, the asset composition of the contribution, the payment schedule, and any associated counterparty and indemnity terms will be disclosed in a subsequent publication to the DAO once the coordinated recovery plan has progressed further.
Approval
If approved by AAVE token holders via Snapshot vote, Aave DAO representatives shall make the stated funds available for the intended purpose and authorise Aave Labs (or a designated affiliate acceptable to both Aave Labs and the DAO) to secure funding on behalf of the Aave DAO exclusively for the purpose of orderly resolution of the rsETH backing shortfall, including remediating bad debt and restoring the health and normal functioning of affected markets, and facilitating any future restructuring of those facilities.
That authority is subject to defined limits. Aggregate borrowing across all rescue lenders is capped at a maximum amount reflecting the residual funding gap. The revenue share directed to repayment will not exceed a pre-defined percentage of total Aave protocol revenue, as determined by Aave service providers, applied on full drawdown and directed onchain to dedicated repayment contracts. The repayment term for each drawdown is subject to a maximum duration from the applicable drawdown date, with the option to refinance respective facilities at a later date.
Disclaimer
TokenLogic is an active service provider to the Aave DAO, the beneficiary of stream 100072 and the KPI as outlined in this publication. The scope of this engagement is available via this forum proposal.
TokenLogic supports and maintains an independent delegate voting platform within the Aave community.
TokenLogic and associated entities have no undisclosed material conflicts of interest at the time of submission.
Next Steps
- Gather feedback from the community.
- If consensus is reached on this ARFC, escalate this proposal to the Snapshot stage.
- If Snapshot outcome is YAE, escalate this proposal to the AIP stage.
Copyright
Copyright and related rights waived via CC0.

