rsETH incident — 2026-04-18

Your ETH is fine just chill and let the people work. The Arbitrum vote will finish in a few hours and you will get some updates.

Greetings Aave community,

The attacker’s rsETH positions on Aave have now been liquidated on Ethereum and Arbitrum, in line with the technical plan previously outlined in this thread.

This is an important step in resolving the Aave-side impact of the rsETH incident. The liquidation used the planned protocol-level path and helps move the process toward deficit resolution and recovery handling.

We have shared an update on X with the full technical plan: https://x.com/aave/status/2052100832834036187

Further updates will continue to be shared as the remaining recovery steps progress.

Aave Labs

2 Likes

I rarely use X, and I followed a link on the replies to the announcement to check my compensation, but seems to be a false site, and I fear some of my aBasWETH was stolen.
I thought you cannot remove supplied assets… I wrote support to see if it can be helped somehow. Not a good day.
Aave please remove such scams…it is misleading and dangerous please.

I’m groaning at “utm_source=chatgpt.com” in the link you provided.

Is no one able to write a paragraph on their own anymore?

Time to unfreeze

Restoring Normal Market Operations

The restoration of rsETH backing and the clearing up of affected positions can be executed in parallel.

This final phase of the restoration process involves unpausing and unfreezing rsETH and ETH across all affected instances, and restoring the Loan-to-Value (LTV) ratios for ETH and any other assets whose configurations were temporarily adjusted

AAVE have executed and. COMP have also liquidated the hacker.

Based on the post we are now in the final stage which is restoring and unfreezing the assets.

We don’t need to wait for the courts as there is more than enough money to restore and let the markets run on its own.

Finally l would say communication should be here instead of twitter. This is the official forum for this event and avoid user being hacked on spammer twitter.

3 Likes

I regret ever coming here to check the status of this freeze situation…
I just lost most of my supplied ETH, and now some of other collateral due to liquidation, and not being able to withdraw and move assets between accounts, or swap borrow to reduce liquidation rate. Do not understand why cbBTC, and other stable coins cannot be withdrawn even when there is sufficient collateral after withdrawal. But those are being liquidated now, as I cannot do anything with my positions due to this freeze. Worst case scenario…

I was in the wrong emotional state when I was reading the X post, and did not pay attention to the legality of the link…I did check the signature to make sure I was not sending anything, but still got caught…

Just posting here the link, so others do not fall in the same trap.
Aave…if you are going to re-direct people to other social media places, please at least clean and monitor your posts there to prevent this…

You can watch a big chunk of my retirement savings disappear under this transaction ID.
0xe532927b0249862475ec191e9cbabcee2c1f37bc94b329ada432db0d24581322

Lesson Learned. Be careful all…

There’s a big warning above: “End of Thread, don’t click any links below this post.” Why would you click on a link from an unknown source? Scammers are everywhere in the Web3 world, so be careful. The scammers I’ve seen disguise themselves with official names and avatars; the one you encountered didn’t even change their name, and you still fell for it. Sigh.

As I said, bad emotional state, too much going on in the market and geopolitical, not X user savvy, stressed by the locking of my funds and missing market opportunities, and rushed. All the wrong ingredients.

Just sharing my experience for people in similar state. Normally, I would not have done this.
I made my peace with it, and now focusing on how to bring my bag back up. Lesson learned…painfully…

And to Aave. X was uncalled for. Message should have been provided here. Is not even that long…

I think we can place liability on users for making mistakes, but at some point, if a giant sign warning about a hazard still doesn’t stop the mistakes from happening, maybe the solution is to stop bringing people to the place where the hazard exists.

For example, you could compare it to placing a business right next to a murder pit, and regularly holding press conferences adjacent to the hole. At the end of every speech, you can warn everyone to remember, “and remember everyone, at the end of this speech, don’t wander into the murder pit, no matter how alluring the voice is that calls you in.”

Or maybe just stop giving press conferences next to the murder pit. Maybe use your own website.

3 Likes

Next time, talk to your AI. I was under that same pressure, but my AI calmed me down. Most times, the best move is not making a move.

But also, Aave has been battle tested for years. So while seeing an event like this happen is hard to handle, you gotta have a clear mind or do your best to have a clear mind.

Let this be a lesson and play smarter.

Greetings Aave community,

We have published Phase II of the rsETH incident recovery technical plan, covering the progress made since the initial April 28 plan and the remaining steps toward restoring rsETH backing and normalizing affected markets.

The update includes the completed liquidation of the eight identified thief positions on Aave V3, transfer of the recovered rsETH to the Recovery Guardian, governance progress across Mantle and Arbitrum, and the next technical steps in the recovery process.

The full update can be found on X: https://x.com/aave/status/2052928584667275472

Aave Labs

3 Likes

Maybe time to drop the coin into the hat?

Greetings Aave community,

rsETH is now unpaused on Aave’s Ethereum Core, Arbitrum, Base, Linea, and Mantle markets enabling users to withdraw rsETH.

Aave Labs

2 Likes

Is it typical for ETH to show as frozen on the Base network? Please let me know if I am missing something.

Thank you