Gate Newsのメッセージ、4月23日—Aaveの創業者Stani Kulechov氏は、KelpDAOのインシデントを受けて4月22日に、連携した復旧対応の取り組みを明らかにし、プラットフォームの最優先事項が利用者を保護し、秩序だった市場環境を実現することだと述べた。彼は、チームが複数のパートナーとともに潜在的な解決策に向けて継続的に作業していること、また、Arbitrum Security Councilが約 ミリオンのETHを回収しており、全体のエクスポージャーを大幅に減らし得ることに触れた。複数のパートナーとともに作業していること、また、Arbitrum Security Councilが約 million in ETH, which could significantly reduce overall exposure.
Aave experienced a sharp decline in deposits, losing approximately $15.1 billion within 3.5 days. Total deposits dropped from $48.5 billion to $30.7 billion, representing roughly one-third of the platform's capital. Some funds shifted to other platforms perceived as more secure, with SparkLend absorbing about $1.3 billion during the same period. The movement was characterized as a targeted response to the specific exploit rather than a broad market sell-off.
The incident originated on April 18 when attackers exploited a vulnerability in KelpDAO's LayerZero bridge, minting approximately 116,500 rsETH tokens worth an estimated million without underlying ETH backing. The attacker used the unbacked rsETH as collateral in Aave's V3 and V4 markets on Ethereum and Arbitrum, borrowing between million and million in WETH and wstETH before the tokens were identified as lacking value. Estimates of resulting bad debt range from approximately million to as much as million, depending on loss distribution. Aave's core smart contracts were not directly compromised; the issue stemmed from the acceptance of rsETH as credible collateral.