# Where Aave’s Exploit Recovery Effort Stands *Author: Jack Inabinet* *Published: Apr 27, 2026* *Source: https://www.bankless.com/es/read/where-aaves-crisis-recovery-stands* --- Hackers [unleashed chaos](https://www.bankless.com/read/the-day-defi-changed-forever) on DeFi last week, [compromising](https://www.bankless.com/read/news/kelp-dao-bridge-drained-for-292m-in-rseth) admin access of KelpDAO’s LayerZero-powered bridge to [open](https://www.bankless.com/trapped-liquidity-7b-bank-run-freezes-cryptos-leadin-lenders-locked-in) a multi-hundred-million-dollar hole in Aave, the crypto industry’s onchain lending market lynchpin. Aave lenders rushed for the exits in the immediate aftermath of the attack, spiking utilization rates to 100% in many critical markets, effectively draining all available liquidity and preventing users from making further withdrawals. While fears for industry-wide contagion loomed large in the days that followed, those concerns have since abated, with a donation campaign securing over $300M to backstop the shortfall. *Today, let's take a look at where the exploit recovery effort sits right now.* ## 💸 Exploit Recoveries Although the early days that followed the KelpDAO exploit were indeed dark, with only $56M in WETH deposits stored in Aave’s [staking module](https://app.aave.com/staking/?marketName=proto_mainnet_v3) reserved against hundreds of millions of dollars in bad debt, the rsETH hole appears to have been plugged. The first major windfall came last Tuesday, when the Arbitrum Security Council [intervened](https://www.bankless.com/read/news/arbitrum-security-council-freezes-70m-eth-tied-to-kelpdao-exploit) and froze 30,766 ETH (~$70M) related to the exploit that sat idle on its Layer 2 blockchain. [Arbitrum Intervenes, Security Council Freezes $70M ETH Tied to KelpDAO Exploit on BanklessThe action is reigniting industry-wide debate about when blockchain service providers have a responsibility to act.![](https://static.ghost.org/v5.0.0/images/link-icon.svg)BanklessJack Inabinet![](https://storage.ghost.io/c/e4/b7/e4b77544-5a37-4f0b-8824-8440aa348476/content/images/thumbnail/arbitrum-intervenes-security-council-freezes-70m-eth-tied-to-kelpdao-exploit-1776790456.png)](https://www.bankless.com/read/news/arbitrum-security-council-freezes-70m-eth-tied-to-kelpdao-exploit)This bounty of seized assets represents the largest individual contribution that could go toward patching the KelpDAO exploit, but despite its significance, the timeline for recovery remains a tad uncertain. Moving these funds requires Arbitrum governance to [approve](https://forum.arbitrum.foundation/t/constitutional-aip-approve-release-of-frozen-eth/30825) a “Constitutional API,” which mandates: a week of forum discussion, an optional one-week temperature check, a three-day voting delay, a 14- to 16-day onchain vote, an eight-day L2 waiting period, an L2-to-L1 message finalization step of typically at least a week, and a final three-day L1 wait before execution. Although there is an ongoing attempt to circumvent these arduous standards for proposal passage, Arbitrum’s current rules as written entail an [estimated](https://www.theblock.co/post/398882/aave-kelp-layerzero-ask-arbitrum-dao-to-release-71-million-in-frozen-eth-to-rseth-recovery-effort) 49-day recovery timeline. Furthermore, even though these funds are the rightful property of KelpDAO exploit victims, they could easily become encumbered by legal challenges. Regulators or law enforcement agencies may seek court-ordered freezes that coerce Arbitrum’s Security Council into keeping the stolen assets immobilized, indefinitely delaying recovery. Aave risk management group TokenLogic [estimates](https://governance.aave.com/t/arfc-rseth-incident-funding-update/24740) that an additional 14,168 WETH can be recovered by liquidating the exploiter’s positions across Aave and Compound, leaving a residual funding gap of ~75k WETH. However, much like frozen funds on Arbitrum, the exploiter’s positions on Aave and Compound could become the subject of legal challenge, complicating and prolonging the recovery process. ![](https://storage.ghost.io/c/e4/b7/e4b77544-5a37-4f0b-8824-8440aa348476/content/images/2026/04/data-src-image-2b299ab9-1868-43ed-a971-b83c00de02b5.png)*Source: [Arbitrum Governance](https://forum.arbitrum.foundation/t/constitutional-aip-approve-release-of-frozen-eth/30825)* ## 💪 DeFi United To address the remaining ~75k WETH shortfall, Aave created DeFi United, a coalition that began soliciting donations from the crypto industry. Unlike the funding addressed above – obtained from stolen sources – donations to DeFi United were freely given and therefore unlikely to face legal entanglement. Assuming no legal challenges arise against the funds seized by Arbitrum’s Security Council or the exploiter’s lending positions slated for liquidation, DeFi United appears to have succeeded in patching the KelpDAO exploit. EtherFi, Lido, BGD Labs, Golem, and Aave co-founders Ernesto Boado, Emilio Frangella, and Stani Kulechov have [donated](https://x.com/dcfgod/status/2047740579640115678?s=20) a combined 14,350 ETH to DeFi United, with additional donations [promised](https://x.com/dcfgod/status/2047740579640115678) by Ethena, LayerZero, and Ink. By Friday, the hole appeared to be finally plugged after Aave DAO [proposed](https://www.theblock.co/post/398863/aave-proposes-25000-eth-contribution-defi-united-plug-kelp-dao-exploit-hole) a 25k ETH donation and Mantle (a major creditor to Aave) [agreed to extend](https://www.theblock.co/post/398735/mantle-proposes-30000-eth-loan) a 30k ETH loan to Aave. Following the apparent recovery, additional capital continued to surface, with Consensys [pledging](https://x.com/aave/status/2048749676459884804?s=20) another 30k ETH this morning (though it remains unclear whether the funds were donated or loaned). > The recovery fund has now been reached for the purpose of fully backing rsETH, subject to pending votes, indicative agreements, and successful execution. [https://t.co/zsojriexRw](https://t.co/zsojriexRw)— Stani (@StaniKulechov) [April 26, 2026](https://twitter.com/StaniKulechov/status/2048193607979454681?ref_src=twsrc%5Etfw) ## 🧐 What Comes Next? With 30,766 ETH frozen on Arbitrum, 14,168 WETH recoverable via liquidation, and more than 100k ETH in pledged donations and loans, the crypto industry appears to have sidestepped what could have been a full-blown catastrophe. Although Aave’s WETH [markets](https://app.aave.com/reserve-overview/?underlyingAsset=0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2&marketName=proto_mainnet_v3) remain gridlocked with 100% utilization, liquidity has finally returned to core stablecoin pools, an early signal that fears of cascading bank runs and bad debt socialization are beginning to ease. Still, a significant portion of the recovery remains contingent on slow-moving governance processes and the absence of legal challenges, leaving both the timing and completeness of restitution uncertain. --- *This article is brought to you by [MetaMask](https://www.bankless.com/es/sponsor/metamask-1776260643?ref=read/where-aaves-crisis-recovery-stands)*