Aave has raised $160 million of the roughly $200 million it needs to cover bad debt from the KelpDAO exploit, according to blockchain analytics firm Arkham Intelligence. The recovery effort, called DeFi United, represents the largest coordinated financial bailout in decentralized finance history.
“AAVE have so far raised $160M to cover the bad debt from the Kelp DAO Exploit, at defiunited.eth,” Arkham posted on X on Saturday. “The largest contributors are Mantle and AAVE DAO, who together raised 55,000 ETH or $127M.”
Inside the Largest DeFi Recovery Operation
The KelpDAO exploit, which drained $292 million and ranks as 2026’s largest DeFi hack, originated from a vulnerability in KelpDAO’s integration with LayerZero. An attacker minted 116,500 unbacked rsETH tokens – the yield-bearing derivative of ether at the center of the attack – and used them as collateral to borrow approximately $200 million in wrapped ether from Aave’s lending pools.
The impaired collateral triggered a bank run on Aave’s deposits. Lenders rushed to withdraw their funds, pulling $10 billion from the protocol over the following days. Total value locked across DeFi dropped by $13 billion, though analysts at CoinDesk noted that much of the decline came from used positions unwinding rather than actual capital destruction.
DeFi United was organized by Aave service providers and launched within days of the exploit. The fund’s goal is to recapitalize rsETH and absorb the bad debt sitting in Aave’s wrapped ether pool.
Stani Kulechov Puts Personal Capital on the Line
Aave founder Stani Kulechov contributed 5,000 ETH from his personal holdings – worth approximately $11.7 million at current prices – to the recovery fund.
“I’m personally contributing 5,000 ETH to DeFi United as we continue working together with partners,” Kulechov said.
Beyond Mantle and Aave DAO’s combined $127 million contribution, the remaining $33 million has come from a mix of DeFi protocols, funds, and individual whales who responded to calls for participation. The fund still needs roughly $40 million to fully cover the estimated bad debt.
What the Exploit Means for DeFi Risk Management
The KelpDAO incident is the second nine-figure exploit in 2026 where liquid restaking token (LRT) collateral accepted on Aave produced bad debt from a failure in an external protocol – not in Aave itself. Galaxy Research noted that this pattern raises fundamental questions about how lending protocols vet the collateral they accept.
“Loan-to-value ratios on collateral are likely to tighten, and the case for isolation-mode-only listings is now substantially stronger,” Galaxy’s analysis concluded.
The first major incident this year hit Drift Protocol on Solana in late March, where an attacker drained $270 million by abusing a legitimate feature called “durable nonces” rather than exploiting a code bug. Together, the two exploits have extracted over $560 million from DeFi protocols in less than two months.
Despite the scale of losses, some metrics tell a more nuanced story. Spark Protocol’s total value locked jumped from $1.8 billion to $2.9 billion over the weekend following the KelpDAO exploit, as users migrated deposits away from Aave to perceived safer alternatives rather than exiting DeFi entirely.
The $40 Million Gap
The remaining $40 million shortfall represents the final and potentially most difficult stretch of the recovery effort. Early contributors acted out of systemic self-interest – a collapse in Aave’s ability to honor deposits would have cascading effects across the entire DeFi system, where Aave serves as a foundational lending layer.
But as the gap narrows, the incentive for additional contributors diminishes. Whether DeFi United can close the remaining deficit will test the limits of the industry’s ability to self-organize under pressure.
If successful, the operation will set a precedent for how DeFi handles systemic crises without a central authority or government backstop. If it falls short, Aave depositors will bear the remaining losses, and the debate over whether decentralized lending can manage tail risk will intensify.
FAQ
How much has Aave raised to cover the KelpDAO exploit?
Aave has raised $160 million of the $200 million needed through the DeFi United recovery fund. Mantle and Aave DAO are the largest contributors at a combined $127 million.
What caused the KelpDAO exploit?
The attack exploited a vulnerability in KelpDAO’s integration with LayerZero, allowing an attacker to mint 116,500 unbacked rsETH tokens and use them as collateral to drain approximately $200 million in wrapped ether from Aave.
Is DeFi safe after the KelpDAO hack?
The DeFi sector has shown resilience through coordinated recovery efforts, but the incident has exposed weaknesses in how lending protocols assess external collateral risk. Analysts expect stricter collateral requirements and isolation-mode listings .
*Sources: CoinDesk, Arkham Intelligence, Galaxy Research, Forbes*
