DeFi United’s RsETH Rescue Plan: The Big Comeback Nobody Saw Coming

by

What’s the plan here, folks? DeFi United rolls out a rescue operation for rsETH like it’s a cliffhanger episode of a show no one asked for. A two-track scheme, more moving parts than a Seinfeld episode about nothing, but somehow it’s supposed to make us feel safe. Spoiler: yes, there are lockboxes and governance votes involved. Very comforting.

DeFi United, the multi‑protocol coalition formed after the Kelp DAO bridge fiasco, has released the technical implementation playbook to put rsETH’s collateral back where it belongs and unwind the attacker’s leftovers across Aave and Compound-arguably the most detailed plan since the whole $292 million incident. It’s like bringing in consultants to fix a leaky faucet with a blueprint that mentions “ping-ponging variables” more times than you’d like.

The plan, unveiled via Aave’s official channel, lays out a two-track recovery: a tranche-based redeposit of ETH into Kelp DAO’s bridge lockbox to restore the rsETH peg, and a governance‑approved liquidation sequence to recover collateral still locked in Aave V3 on Ethereum and Arbitrum, plus on Compound. It’s a two‑track mind-bender-like parallel parking a planet-except this time, they say it’s all under control.

– Aave (@aave) April 28, 2026

What Was Stolen, and Where It Sits Now

The April 18 exploit freed 116,500 rsETH from the Ethereum-side LayerZero OFT adapter after a forged inbound packet was verified without a burn on Unichain. DeFi United’s words: about 107,000 rsETH of that haul remains parked across seven addresses in active rsETH-backed positions on Aave and Compound-basically, most of the loot is still on-chain and potentially recoverable. Very reassuring.

The rest bridged to Arbitrum and shuffled elsewhere. Arbitrum’s Security Council froze roughly 30,766 ETH (about $71 million) of the downstream proceeds on April 21, and a separate governance proposal filed April 25 seeks to release those funds to the recovery effort. Because nothing says “we’re in control” like a committee freezing money and then deciding what to do with it.

Track One: Restoring rsETH’s Backing

DeFi United says it has ETH commitments sufficient to restore rsETH’s full backing at the current Kelp exchange ratio of 1.07 ETH per rsETH. The plan calls for converting that ETH into rsETH in tranches, then transferring it into the bridge lockbox contract (the RSETH_OFTAdapter at 0x85d456b2…98ef3) before the bridge resumes operations. It’s a little dance with numbers and contracts-very graceful if you squint and pretend.

Both LayerZero and Kelp have added extra security before the restart, though the coalition admits residual risk remains until those measures prove themselves in production-a key reason for the staged tranche approach rather than a single heroic deposit.

The contributor base already looks impressive. The Crypto Times reported pledges reaching about 69,642 ETH (~$161 million) from 14 participants, with Consensys and Joe Lubin upping commitments to as much as 30,000 ETH and the Aave DAO proposing another 25,000 ETH treasury infusion. It’s a big loyalty program for a sticky situation.

Track Two: A Controlled Liquidation Sequence

The clever part of the plan is unwinding the attacker’s positions. Since the attacker’s rsETH collateral is unbacked, ordinary liquidations won’t work. So DeFi United proposes a temporary oracle adjustment on Aave’s Ethereum and Arbitrum deployments, pushed through governance, to efficiently liquidate the seven affected positions. It’s governance theatre meets high-stakes balance sheet juggling.

Recovered rsETH will go to a dedicated multisig managed by DeFi United, then redeemed for ETH via Kelp’s redemption process. The ETH is earmarked to cover the deficit on both Aave markets-roughly 13,000 ETH on Aave alone. Parallel to this, a similar process on Compound, supported by DeFi United liquidity, is expected to recover about 16,776 ETH worth of funds.

The coalition stresses that all configuration changes are strictly for recovery and will be fully reverted on completion. WETH and rsETH reserves across Ethereum Core, Arbitrum, Base, Mantle, and Linea stay frozen during the process. Because nothing says “we’ve got this” like a frozen vault and a timer.

The Final Phase

Once the lockbox is full and the affected positions are cleared, the plan calls for unpausing rsETH and ETH markets across all impacted deployments and restoring loan-to-value ratios for ETH and other assets that had to be tweaked. The two tracks-backing restoration and position unwinding-can run in parallel, which they say should speed things up. Speed, in DeFi terms, is always comforting.

Execution Risks

DeFi United flags three main risks: ETH commitments depend on finalized governance votes; the liquidation sequence needs to pass governance on Ethereum and Arbitrum, with attackers possibly throwing a wrench if deficits don’t accrue; and the bridge restart carries residual security risk until the new measures prove themselves in production. It’s a risk buffet, but at least they’re calling it a plan instead of a guess.

And yes, the plan explicitly avoids socializing losses to rsETH holders-a refreshing buck the trend, if only because it sounds like the adult in the room finally showing up to the party.

Read More

2026-04-28 09:25