Aave liquidates Kelp DAO hacker’s rsETH — but $71 million in recovery ETH is stuck in court

What Aave just liquidated — and what it did not touch

Aave Labs announced this week that it completed liquidation of the Kelp DAO attacker’s remaining rsETH collateral across its Ethereum and Arbitrum deployments. The liquidated assets — roughly 13,000 ETH, worth about $30 million at current prices — are being routed to Recovery Guardian, a multisignature wallet managed by DeFi United. Aave stressed that no user deposits were tapped, and its Umbrella bad-debt insurance mechanism was not activated.

That distinction matters for anyone still holding rsETH or using Aave lending markets. The April exploit created an estimated $123–230 million in potential bad debt depending on how losses were socialized across chains, and triggered a $15 billion drop in total DeFi TVL within 48 hours as depositors fled lending protocols with or without direct rsETH exposure. Aave alone lost roughly $8.45 billion in TVL over two days, surrendering its position as the largest DeFi protocol by deposits.

The liquidation closes the attacker’s on-chain borrowing positions through a governance process that was itself controversial: Aave temporarily adjusted the rsETH oracle price to force a deficit in the fraudulent collateral, then pledged to revert all configuration changes once recovery completed. Galaxy Digital research vice president Thaddeus Pinakiewicz estimates DeFi United is now roughly 10% short of the ETH needed to restore full rsETH backing — a gap small in percentage terms but large in coordination complexity.

How a bridge misconfiguration became a lending-market contagion

The exploit was not a flash-loan gymnastics trick. It was a configuration failure in Kelp DAO’s LayerZero omnichain fungible token bridge: a single-verifier setup that let attackers compromise RPC nodes and feed false data, unlocking rsETH from Ethereum mainnet escrow that should never have moved. The stolen tokens were immediately deposited as collateral to borrow real ETH.

rsETH is a liquid restaking token — a wrapper around staked ether that trades on secondary markets while representing underlying validator exposure. When 116,500 rsETH appeared unbacked, roughly 15% of post-exploit supply lost its peg integrity, and only 40,373 rsETH remained in the Ethereum-side adapter against 152,577 rsETH outstanding on L2s. Readers unfamiliar with the mechanics should see our liquid staking explainer for how exchange-rate accrual and bridge adapters interact.

Within hours, Aave froze rsETH, wrsETH, and WETH markets across deployments. Stablecoin markets hit 100% utilization — zero liquidity for withdrawals. Morpho, Sky, and JupLend saw outflows despite minimal rsETH exposure, illustrating how cross-protocol fear spreads faster than direct loss attribution. The episode sits in the same stress window as record ETH ETF outflows and ETH trading below $1,600, when even defensive collateral moves like Lubin’s 110,000 ETH Sky vault top-up read as panic rather than prudence.

DeFi United: the coalition that rebuilt rsETH — almost

DeFi United formed within 48 hours of the drain. Contributors now include Lido, EtherFi Foundation, Ethena, Mantle, Ink Foundation, Golem Foundation, Compound, LayerZero, Aave DAO, and Consensys — with strategic input from Lubin and Aave founder Stani Kulechov, who personally pledged 5,000 ETH. Consensys and Mantle each committed 30,000 ETH. By late April, commitments exceeded $160 million; the coalition now reports roughly $311–320 million pledged subject to final execution.

The technical recovery playbook worked faster than skeptics expected. Arbitrum DAO voted overwhelmingly — more than 90% in favor — to release frozen exploit funds to the recovery fund. Kelp burned the attacker’s rsETH on Arbitrum. The LayerZero OFT adapter was refilled in five tranches. Aave’s formal post-mortem, published in early June, confirms WETH markets operating normally and rsETH withdrawals reopened.

Yet “technically restored” and “legally cleared” are different states. The coalition is actively courting additional ETH from Circle, Ethena, Frax, and Kraken’s Ink L2 to close the remaining 10% gap Pinakiewicz identified. That shortfall is manageable if governance votes and issuer commitments land. The $71 million frozen tranche is not manageable by governance alone.

The $71M legal limbo: terrorism creditors vs. DeFi recovery

On May 1, judgment creditors in an unrelated federal matter served a restraining notice on Arbitrum DAO seeking to seize approximately 30,765.67 ETH that the Arbitrum Security Council had frozen on April 21 as part of the containment effort. The creditors hold roughly $877 million in unpaid terrorism judgments against North Korea. Their argument: because the Kelp exploit is attributed to Lazarus Group, recovered funds belong to judgment creditors, not rsETH holders.

Aave filed an emergency motion on May 4 to vacate the restraining notice, arguing the ETH should flow to Recovery Guardian for user restitution. Judge Margaret M. Garnett in the Southern District of New York authorized ongoing recovery work while keeping the restraining notice in place. A critical hearing was scheduled for June 5; briefs were due May 22. As of June 7, the disposition remains unresolved — the technical recovery is complete, but the final ownership of one-quarter of the coalition’s recovered collateral awaits a court that does not optimize for block times.

This is the episode’s deepest lesson. DeFi built a $300 million voluntary bailout in weeks. Traditional law moves on docket schedules. When stolen assets touch nation-state attribution, on-chain governance and off-chain courts collide. Arbitrum DAO can vote 90% to release funds; a federal restraining notice can still hold them. The Ethereum Foundation’s CROPS pivot toward credible neutrality looks prescient here: protocol commons coordinate rescue, but they do not replace legal process.

Market read-through: Aave TVL rebound vs. lingering risk premium

DefiLlama data shows Aave TVL rebounding above $15 billion after bottoming near $17.9 billion during the acute outflow phase — still below the pre-exploit $26.4 billion peak, but no longer in free fall. Net outflows have eased. That is not redemption; it is stabilization. Lending protocols that survived the Kelp shock now trade at a higher perceived governance risk premium: any future bridge-token collateral event could again require emergency oracle manipulation, market freezes, and a coalition phone tree.

For rsETH holders specifically, the near-term question is whether the 10% ETH gap and the $71 million court block resolve before the next macro shock. ETH’s June slide — worst weekly performance since the FTX collapse, per multiple market trackers — compresses the time DeFi United has to finalize commitments while collateral values fall. Liquidation thresholds on large Sky-style positions, covered in our Lubin collateral analysis, remind us that recovery and stress coexist in the same mempool.

Three scenarios through Q3 2026

Scenario A — Clean resolution (40–45% probability): SDNY vacates or narrows the restraining notice; Arbitrum DAO releases the 30,766 ETH to Recovery Guardian; Circle, Ethena, Frax, or Ink plug the remaining 10% gap. rsETH fully backed, Aave oracle configs reverted, Kelp bridge re-audited with multi-verifier requirements. TVL recovery accelerates. The episode becomes a case study in DeFi crisis coordination rather than a lasting scar.

Scenario B — Partial recovery, prolonged litigation (35–40% probability): Court allows some ETH to reach users but awards a portion to terrorism creditors under asset-forfeiture theories. rsETH backing restored at a discount; remaining holders absorb a haircut or delayed claim process. Aave operational but rsETH and bridge LRT collateral carry a persistent risk premium through year-end. Other LayerZero OFT bridges face mandatory security upgrades.

Scenario C — Funds seized, contagion repriced (15–20% probability): Creditors win full claim on frozen ETH; DeFi United cannot close the gap from other commitments alone. rsETH depegs again; lending protocols tighten LRT collateral factors industry-wide. Another $5–10 billion TVL outflow cycle hits Ethereum DeFi, compounding the cross-asset June selloff. Bridge tokens treated as toxic collateral until insurers or regulators define a backstop framework.

What to watch next

• SDNY court filings after the June 5 hearing — any order modifying the restraining notice on the 30,766 ETH tranche.
• Arbitrum DAO execution of the >90% governance vote to release frozen funds, contingent on legal clearance.
• Circle, Ethena, Frax, and Ink commitments to close Galaxy’s estimated 10% ETH shortfall.
• Aave governance confirmation that rsETH oracle settings are fully reverted and Umbrella parameters updated post-mortem.
• LayerZero OFT audits across other liquid restaking bridges — single-verifier configs are now a known attack surface.

The Kelp DAO exploit proved DeFi can mobilize a nine-figure rescue without a central bank. It also proved that rescue stops at the courthouse door. Aave’s liquidation of the hacker’s rsETH was the easy part — on-chain positions close when governance votes pass. The $71 million still frozen is the hard part, and it will set precedent for every future North Korea-linked drain whether holders notice or not.

Sources: Galaxy Digital — KelpDAO/LayerZero exploit research; Crypto Times — Aave post-mortem and court battle (Jun 1, 2026); The Bit Gazette — SDNY terrorism creditor fight; Gate News — Aave rsETH liquidation announcement.