[Direct-to-AIP] Onboard wrsETH to Aave v3 Plasma Instance

[Direct-to-AIP] Onboard wrsETH to Aave v3 Plasma Instance


Title: [Direct-to-AIP] Onboard wrsETH to Aave v3 Plasma Instance
Author: @ACI
Created: 2025-09-29

Proposal updated with latest Risk Service Parameters by Risk Providers 2025-10-09


Summary

This publication proposes adding wrsETH as collateral to the Aave v3 instance on the Plasma network using the Direct-to-AIP process.

Motivation

rsETH is a liquid staking token issued by Kelp DAO, offering users access to rewards from ETH staking while maintaining liquidity and DeFi composability.

Following the strong adoption of wrsETH on Linea, where it is the largest LRT, this publication proposes onboarding wrsETH to Plasma. wrsETH has established a reliable track record across Aave markets, with users deposits of ~$1B on Core, ~$370M on Linea and smaller balances on other networks.

Given that:

  • rsETH has already passed governance and risk assessments for Ethereum, Arbitrum, and Base;
  • Plasma is a supported Aave V3 deployment with growing activity and integration potential; and,
  • A precedent has been set for using the Direct-to-AIP path when onboarding previously approved assets to new instances.

By bringing wrsETH to Plasma, users will benefit from an additional network where they can utilize the asset under consistent risk parameters.

Specification

Kelp’s wrsETH has already been approved and executed on the Ethereum, Arbitrum, Linea and Base Aave V3 instances, following the Direct-to-AIP process, this proposal when implement will extend rsETH support to the Plasma instance.

wrsETH Market Configuration (Plasma Instance)

Parameter Value
Asset wrsETH
Isolation Mode No
Borrowable No
Collateral Enabled Yes
Supply Cap 20,000
Borrow Cap -
Debt Ceiling -
LTV 0.05%
LT 0.10%
Liquidation Penalty 7.0%
Liquidation Protocol Fee 10.00%
Variable Base -
Variable Slope1 -
Variable Slope2 -
Uoptimal -
Reserve Factor -
Stable Borrowing Disabled
Flashloanable Yes
Siloed Borrowing No
Borrowable in Isolation No
E-Mode Category see below

wrsETH/WETH E-Mode

Parameter wrsETH WETH wstETH
Collateral Yes No No
Borrowable No Yes Yes
Max LTV 93% - -
Liquidation Threshold 95% - -
Liquidation Bonus 1.0% - -

CAPO

maxYearlyRatioGrowthPercent ratioReferenceTime MINIMUM_SNAPSHOT_DELAY
9.83% monthly 7 days

Useful Links

[ARFC] Add rsETH to Aave V3 Ethereum
[ARFC] Onboard rsETH to Ethereum and Arbitrum and Base V3 Instances
[Direct to AIP] Onboard rsETH to Aave V3 Linea Instance
rsETH Documentation: https://docs.kelpdao.xyz/

Disclosure

This proposal is powered by Skywards. The Aave Chan Initiative is not directly affiliated with Kelp DAO and did not receive compensation for creation of this proposal.

Next Steps

Publish an AIP vote for final confirmation and enforcement of the proposal.

Copyright

Copyright and related rights waived via CC0.

1 Like

Summary

LlamaRisks supports the onboarding of wrsETH to the Plasma instance. wrsETH’s architecture follows the same OFT design seen in rsETH on other L2s onboarded. Onchain supply at the time of writing was approximately 736 rsETH, with liquidity for wrsETH concentrated in 2 Balancer V3 and Curve pools. While market liquidity is rapidly evolving, we note that 695 wrsETH (~$3.2M) could be swapped within a 7.5% price impact.

Moreover, we identified a security concern regarding the BRIDGER_ROLE being assigned to an Externally Owned Account (EOA), which would enable it to bridge funds to itself. In the event this EOA were to be compromised, user funds could be at risk. Following a discussion with the KelpDAO team, they informed us that this function would be deprecated and that the BRIDGER_ROLE would be temporarily assigned to a 3/6 multisig until the upgrade is effected. We are currently in contact with the Kelp team to facilitate this update. Once the EOA is unassigned and the multisig is assigned the role, we will update the community, and will then be able to proceed with the onboarding process on the Plasma instance. This represents a secure interim mechanism until the full upgrade is completed. We will provide a community update as soon as this change is implemented.

1. Asset Fundamental Characteristics

1.1 Asset

wrsETH is the wrapped version of the liquid restaking token rsETH, backed by LSTs such as ETHx, stETH, and native ETH. Extensive analyses of rsETH have been conducted in the past, with previous reports detailing its design and risk considerations, including: Add rsETH to Aave V3 Ethereum, Onboard wrsETH to ZKsync V3 Instance, and rsETH Collateral Risk Assessment.

1.2 Architecture

rsETH is bridged through LayerZero infrastructure and utilizes the Omnichain Fungible Token (OFT) standard. Since OFTs are already present on Aave markets, the bridging mechanism poses little additional architectural risk.

1.3 Tokenomics

wrsETH can be swapped 1:1 with rsETH, as with other deployments. A total of ~736 wrsETH (~$3.3M) is currently available on Plasma, with 7 accounts registered as holders. Effectively, 3 addresses hold 100% of the supply, namely a BalancerV3 vault (~57%), Curve wrsETH/WETH pool (~32%), and an EOA (~11%).

The other 4 addresses registered hold marginal amounts of wrsETH. This low supply is reflective of the recent Plasma mainnet Beta launch.

2. Market Risk

2.1 Liquidity

Approximately 695 wrsETH worth ~$3.2M can be swapped within a 7.5% price impact.


Source: Kyberswap, October 1st, 2025

The two main liquidity venues are the Balancer wrsETH-waPlaWETH pool (~$3.8M TVL) and the Curve wrsETH/WETH pool (~$2.1M TVL).


Source: Trade Routes, Kyberswap, October 1st, 2025

2.2 Volatility

Price history for wrsETH on Plasma is limited, given the network’s recent launch (September 25th).

2.3 Growth

The assets’ growth on the chain is too early to determine, given its recent deployment.

3. Technological Risk

3.1 Smart Contract Risk

Since our collateral risk analysis of rsETH, in addition to the 3 audits we noted from SigmaPrime, Code4rena, and MixBytes, 2 additional audits have been completed by Sigma Prime:

  • June 2024 - 1: 1 high issue, 2 medium issues, 2 low issues, and 4 informational issues were found. The highest rated risk concerned incorrect accounting for stakedButUnverifiedNativeETH. Issues were either resolved or acknowledged (low and informational issues).
  • June 2024 - 2: 2 critical issues, 3 medium issues, 6 low issues, and 12 informational issues were found. Issues were either resolved or acknowledged (closed).

3.2 Bug Bounty Program

Layerzero and Kelp DAO both have bug bounties, with max bounties worth $15.5M and $250K, respectively.

3.3 Price Feed Risk

A Chainlink wrsETH/ETH exchange rate price feed is available. The custom feed has a deviation threshold of 0.05% and a 24-hour heartbeat.

Additionally, a LayerZero cross-chain rate receiver (RSETHRateReceiver) is available, which receives and stores the rsETH/ETH exchange rate updates from the RSETHMultiChainRateProvider contract. The cross-chain risk associated with this is the utilization of LayerZero infrastructure to pass price updates effectively.

4. Counterparty Risk

4.1 Access Control Risk

4.1.1 Contract Modification Options

Deployed Kelp DAO contracts on Plasma:

RSETHPoolV3: the deposit pool for rsETH, deployed behind a TransparentUpgradeableProxy contract.

RSETH_OFT: LayerZero ERC20 contract for rsETH.

rsETHWrapper: is deployed behind a TransparentUpgradeableProxy contract.

RSETHRateReceiver: contract acts as rsETH’s oracle on Plasma

RSETHPoolV3 has the following roles:

  • DEFAULT_ADMIN_ROLE: can assign roles, unpause the contract, and change parameters, e.g., minting limit, fees. Assigned to Multisig A
  • BRIDGER_ROLE: able to withdraw collected fees and move assets for bridging. Assigned to EOA A
  • OPERATOR_ROLE: can perform rsETH to supported asset swaps. Assigned to EOA A
  • PAUSER_ROLE: Pause contract operations. Assigned to Multisig B
  • TIMELOCK_ROLE: can enable and disable deposits, change the oracle, and change supported assets. Assigned to TimelockController.

RSETH_OFT is owned by Multisig A. The owner has access to functions related to LayerZero’s OFT (e.g., cross-chain functionality, fees, and pause abilities) and OpenZeppelin’s Ownable (e.g., transfer ownership and renounce ownership) privileges.

rsETHWrapper has the following roles:

  • DEFAULT_ADMIN_ROLE: can assign roles and unpause the contract. Assigned to Multisig A.
  • BRIDGER_ROLE: can deposit assets to collateralize wrsETH. Assigned to EOA A.
  • MINTER_ROLE: allows the role holder to mint new wrsETH. Not currently assigned (users can mint wrsETH via asset deposits).
  • TIMELOCK_ROLE: can change supported assets. Not currently assigned
  • MANAGER_ROLE: is defined but does not have assigned functions or accounts.

RSETHRateReceiver is owned by the TimelockController.

The BRIDGER_ROLE grants EOA direct access to funds that can be bridged to the account itself through the moveAssetsForBridging function; no timelocks or limits are imposed (beyond fees). In the event this EOA becomes compromised, funds could be siphoned out, leaving rsETH undercollateralized. We contacted the Kelp team about this concern and proposed deprecating the function as was previously done for the wrsETH onboarding to the ZKSync instance.

4.1.2 Timelock Duration and Function

No time locks are implemented directly; however, the TimelockController contract acts as a timelocked admin able to propose operations and execute them after a delay. As noted in section 4.1.1, the TimelockController is assigned the TIMELOCK_ROLE in the deposit pool contract; therefore, changes made by the TimelockController apply a delay to only this role’s functions. Currently, the minimum delay is set to 3 days.

Within the deposit pool contract, the pause function is exposed and accessible by the PAUSER_ROLE

4.1.3 Multisig Threshold / Signer identity

Multisig A has a 3/ 6 threshold. Multisig B has a 1/5 threshold. Signers are comprised of Kelp core team solely.

Note: This assessment follows the LLR-Aave Framework, a comprehensive methodology for asset onboarding and parameterization in Aave V3. This framework is continuously updated and available here.

[/details]

Aave V3 Specific Parameters

Owing to the Plasma’s recent deployment, liquidity is evolving rapidly, and new liquidity pools are being bootstrapped. We have reviewed ACI’s proposed parameters and will provide revised recommendations and will provide them jointly with @ChaosLabs, which will post them here shortly.

Price Feed Recommendation

We recommend using the internal exchange rate of rsETH together with CAPO, in conjunction with Chainlink ETH/USD price feed, as has been utilized for other rsETH markets.

Disclaimer

This review was independently prepared by LlamaRisk, a DeFi risk service provider funded in part by the Aave DAO. LlamaRisk is not directly affiliated with the protocol(s) reviewed in this assessment and did not receive any compensation from the protocol(s) or their affiliated entities for this work.

The information provided should not be construed as legal, financial, tax, or professional advice.

The BRIDGER_ROLE access has been granted to a 3/6 multisig. Simultaneously, the access has been revoked from the identified EOA. Transaction logs are available here:

https://plasmascan.to/tx/0xb821da06ca93f9823ee632dc3743391cb887766117eb4069791e754ca965be2e

We confirm that the onboarding process of wrsETH on the Plasma instance can now be continued. We appreciate the fast resolution from Kelp team.

Overview

Chaos Labs supports listing wrsETH on Aave V3’s Plasma instance. Below, we present our analysis and initial risk parameter recommendation.

Motivation

Inclusion of Kelp DAO’s wrsETH as a collateral asset on Plasma will increase the utility of the instance. The asset has already been onboarded on multiple other Aave V3 instances, including, but not limited to, Arbitrum, Base, and Linea.

Asset Overview

wrsETH is the wrapped representation of rsETH and is made available on Plasma via LayerZero’s OFT standard. This approach introduces minimal incremental risk to the protocol, as the majority of Plasma assets rely on the same bridging mechanism.

Economically, wrsETH represents a claim on underlying rsETH, backed by native-staked ETH and select LSTs(e.g., wstETH), and restaked via Kelp DAO to secure additional services. Holders accrue the combined staking and restaking yields (net of protocol fees) through an appreciating exchange rate, while the wrapped format provides a non-rebasing ERC-20 suitable for DeFi collateral and integrations.

As mentioned previously, the asset is widely used on other Aave instances, primarily in leveraged restaking strategies, where users collateralize WETH or wstETH debt with wrsETH and earn a spread between the underlying yield of wrsETH and the borrow rates of the debt assets.

Plasma Market

The Plasma instance has experienced substantial growth, surpassing $6 billion in total value locked since launch, driven by incentive programs and favorable market dynamics. Introducing wrsETH is expected to enhance the instance’s utility and facilitate growth by enabling additional leveraged strategies, including those based on liquid restaking tokens.

Given the strong demand to borrow USDT against weETH in the instance, coordinated by the Plasma team, coupled with the limited WETH/USDT DEX liquidity on the market, which both assets require routing through during liquidations, has led to a constraint on WETH supply caps.

Consequently, the current WETH supply is relatively small and will likely constrain growth across other LST/LRT markets—wstETH, weETH, and wrsETH—as their looping strategies ultimately compete for a limited WETH borrowing pie.

Given these market dynamics, aggregate LST/LRT demand (e.g., wstETH, weETH, wrsETH) will likely exceed WETH borrowing capacity. To distribute looping demand more evenly and support orderly growth of both the asset and the instance, we suggest introducing an E-Mode for wrsETH / wstETH (mirroring the Core configuration). This would aid in diversifying looping strategies rather than concentrating them around limited WETH capacity.

Liquidity

At the time of writing, Plasma has one significant wrsETH / WETH pool with a net TVL of $6.5 million.

LTV, Liquidation Threshold, and Liquidation Bonus

We recommend setting the asset’s non-E-Mode LTV and LT to 0.05% and 0.10%, respectively, aligning the values with those in the Arbitrum and Base instances. This will prioritize leveraged strategies while limiting uncorrelated borrowing that could exhaust on-chain liquidity in the event of large-scale liquidations.

E-Modes

We recommend introducing a wstETH/WETH E-Mode, which reflects the ETH Correlated E-Mode risk parameters on the Ethereum Core instance. The E-Mode will allow to facilitate wrsETH / WETH looping where users earn leveraged spread between the underlying yield of wrsETH against WETH borrow rate. The configurations aim to increase the utility of both the asset and the instance as a whole by allowing users to deploy wstETH into a set of strategies, incentivizing additional borrowing demand.

We recommend against the introduction of a wrsETH/USDT E-Mode at this time. Plasma’s WETH/USDT DEX liquidity is currently limited, and given the lack of wrsETH/USDT DEX liquidity, any wrsETH liquidation derived from this suggested E-Mode would route via wrsETH/WETH → WETH/USDT, requiring sufficient WETH/USDT liquidity to be performed profitably. Additionally, as wrsETH and other ETH-related assets maintain a high price correlation, a sudden price movement in the collateral value would trigger liquidation from multiple ETH-correlated assets, putting additional strain on the limited WETH/USDT DEX liquidity on the market. This could cause a significant price impact and increase the liquidation risk of related positions.
Chaos Labs will continue to monitor the market and will reconsider the introduction of a wrsETH/USDT E-mode once the DEX liquidity on the route from wrsETH collateral to USDT debt improves meaningfully.

Pricing

We recommend pricing wrsETH using a combination of a wrsETH/ETH exchange rate feed and the ETH/USD price feed to derive the USD price for wrsETH.

Recommendation

Chaos Labs supports the proposal to list wrsETH on the Plasma instance. The listing will increase the instance’s utility and incentivize additional activity that will support further growth and increase the protocol’s revenue. We recommend effectively isolating the asset’s utility wrsETH/WETH E-Mode in order to reduce the volatility exposure and liquidity risks. Additionally, we have observed that WETH liquidity on Aave is currently a limiting factor for the asset’s future growth; hence, we suggest adding a wrsETH/wstETH E-Mode to allow for additional usage in cases of high competition in the WETH market.

Specification

Following the above analysis, we recommend the following parameter settings:

wrsETH Market Configuration (Plasma Instance)

Parameter Value
Asset wrsETH
Isolation Mode No
Borrowable No
Collateral Enabled Yes
Supply Cap 20,000
Borrow Cap -
Debt Ceiling -
LTV 0.05%
LT 0.10%
Liquidation Penalty 7.0%
Liquidation Protocol Fee 10.00%
Variable Base -
Variable Slope1 -
Variable Slope2 -
Uoptimal -
Reserve Factor -
Stable Borrowing Disabled
Flashloanable Yes
Siloed Borrowing No
Borrowable in Isolation No
E-Mode Category see below

wrsETH/WETH E-Mode

Parameter wrsETH WETH wstETH
Collateral Yes No No
Borrowable No Yes Yes
Max LTV 93% - -
Liquidation Threshold 95% - -
Liquidation Bonus 1.0% - -

CAPO

maxYearlyRatioGrowthPercent ratioReferenceTime MINIMUM_SNAPSHOT_DELAY
9.83% monthly 14 days

Disclaimer

Chaos Labs has not been compensated by any third party for publishing this recommendation.

Copyright

Copyright and related rights waived via CC0

1 Like