ChainStreet
WHERE CODE MEETS CAPITAL
Loading prices…
Powered by CoinGecko
CRYPTO CRIME

Aave Makes Significant Progress Recovering From Kelp DAO Exploit

Protocol completes attacker liquidations and secures court approval to reclaim $71 million in frozen ETH.

Aave Makes Significant Progress Recovering From Kelp DAO Exploit

Aave advances its recovery from the April 18 Kelp DAO exploit that created unbacked rsETH and disrupted multiple markets. The protocol completed key liquidations and gained court approval to reclaim $71 million in frozen ETH.

Key Takeaways
  • Aave secures federal court approval to reclaim $71 million in ETH previously frozen after the April 18 Kelp DAO bridge exploit.
  • Protocol developers liquidate eight attacker positions on Aave V3 to restore the rsETH bridge lockbox with retrieved collateral and coalition funds.
  • Aave LLC successfully challenges a restraining notice from terrorism judgment plaintiffs attempting to seize recovered assets from the Arbitrum DAO treasury.
Listen to this article
READY

On May 6, Aave liquidated the thief’s eight identified positions on Aave V3. The retrieved rsETH collateral moved to the Recovery Guardian as required by the approved governance proposal. Other users, including Umbrella stakers, remained unaffected.

A legal battle emerged over the $71 million in ETH frozen by Arbitrum’s Security Council. Plaintiffs holding judgments against North Korea served a restraining notice on Arbitrum DAO on May 1. Aave LLC filed an emergency motion to vacate the notice. During a May 6 hearing, the judge accepted Aave’s proposal and authorized an on-chain Arbitrum DAO vote to transfer the immobilized ETH to Aave LLC. The exchange borrowed separate funds as a contingency while the legal process continued.

Mantle DAO and Arbitrum DAO passed governance proposals with overwhelming support. Arbitrum voters approved the return of the stolen $71 million to Aave users. Mantle voters confirmed participation in the DeFi United recovery coalition.

The recovery plan advanced to restoring rsETH backing. Liquidated rsETH on Arbitrum was burned. Kelp retired the corresponding LayerZero packet on Ethereum to prevent new minting. Seized rsETH on Ethereum moved to the bridge lockbox. These assets, combined with committed ETH from the DeFi United coalition, restored the lockbox contract. 

Advertisement · Press Release

Genuine News Deserves Honest Attention.

High-conviction projects require an intelligent audience. Connect with readers who value sharp reporting.

👉 Submit Your PR

Once fully backed, the bridge resumed normal operations and withdrawals. Aave began reverting temporary configuration changes and restored the Loan-to-Value ratio for WETH on Aave V3 Ethereum Core.

“We are grateful to the judge for the time, care, and thoughtful questions she brought to the May 6 hearing, and for the seriousness with which she is weighing the arguments before her. As the judge deliberates, and in the meantime as a contingency, separate funds will be borrowed to cover the difference until the immobilized ETH are rightfully restored to Aave users. We will provide further updates as we are able, and we’ll continue to work on the recovery plan in parallel,” Aave said.

Chain Street’s Take

Aave continues to make steady progress on a complex, multi-chain recovery. The liquidation of attacker positions, successful DAO votes, and court developments represent meaningful steps forward. While challenges remain, the coordinated effort across Aave, Kelp, Arbitrum, Mantle, and DeFi United shows how the ecosystem can respond when a major exploit occurs.

This case also highlights a growing reality in DeFi. On-chain assets are no longer invisible to traditional legal systems. Plaintiffs are increasingly using court orders to reach DAO treasuries and frozen funds. For protocols and users, this means operational security and legal preparedness have become just as important as smart contract audits.

1views·1AI reads

CHAIN STREET INTELLIGENCE

Activate Intelligence Layer

Institutional-grade structural analysis for this article.

FAQ

Frequently Asked Questions

01

What is the Kelp DAO recovery plan?

The recovery plan is a multi-protocol strategy to restore the financial backing of unbacked rsETH following a bridge exploit. Aave LLC leads the initiative by liquidating attacker positions and securing court orders to retrieve frozen Ethereum. It ensures that affected users receive their original collateral through the DeFi United coalition.
02

Why does this court ruling matter for DeFi protocols?

The ruling establishes that stolen digital assets intended for user restitution take priority over unrelated sovereign legal claims. Aave successfully argued that recovered funds belong to the victims of the April exploit rather than external creditors. It protects decentralized treasuries from being drained by traditional legal actions targeting state-sponsored actors.
03

How will Aave execute the asset restoration?

Aave began the restoration on May 6 by liquidating eight specific attacker positions to retrieve rsETH collateral for the Recovery Guardian. Arbitrum DAO and Mantle DAO subsequently passed governance votes to transfer $71 million in ETH back to the protocol. These funds combined with coalition assets enable the Kelp bridge to resume normal withdrawals.
04

What are the risks of using court orders in DeFi?

Relying on traditional legal systems exposes decentralized organizations like Arbitrum DAO to the friction and delays of sovereign judicial processes. Plaintiffs hunting for North Korean assets proved that on-chain funds are vulnerable to federal restraining notices or asset seizures. This intersection of code and law creates a systemic vulnerability where third parties can freeze treasuries.
05

How will this affect future protocol security?

Future decentralized finance platforms must implement robust legal defense frameworks alongside technical smart contract audits to manage jurisdictional risks. Aave is currently borrowing contingency funds to cover user balances while the formal transfer of the $71 million ETH concludes. Coordinated multi-chain responses through groups like DeFi United will become the standard for security breaches.

You Might Also Like

CHAINSTREET
🛡
Alex Reeve

Alex Reeve is a contributing writer for ChainStreet.io. Her articles provide timely insights and analysis across these interconnected industries, including regulatory updates, market trends, token economics, institutional developments, platform innovations, stablecoins, meme coins, policy shifts, and the latest advancements in AI, applications, tools, models, and their broader implications for technology and markets.

The views and opinions expressed by Alex in this article are her own and do not necessarily reflect the official position of ChainStreet.io, its management, editors, or affiliates. This content is provided for informational and educational purposes only and does not constitute financial, investment, legal, or tax advice. Readers should conduct their own research and consult qualified professionals before making any decisions related to digital assets, cryptocurrencies, or financial matters. ChainStreet.io and its contributors are not responsible for any losses incurred from reliance on this information.