In mid-April, a security flaw tied to the liquid restaking token rsETH drained confidence and liquidity from Aave v3’s WETH pool—the largest wrapped Ether market in DeFi. An attacker exploited an unbacked minting vulnerability in KelpDAO’s rsETH, using unbacked tokens as collateral to siphon roughly 126,000 WETH. The sudden withdrawal, combined with an already elevated 89% utilization rate, pushed the pool to 100% utilization, triggering a classic on-chain bank run. Over $2 billion in aggregate stablecoin liquidity fled within 24 hours.
Now, according to on-chain metrics from Sealaunch shared by WuBlockchain, WETH liquidity in the core Aave v3 market has recovered to approximately $620 million—above pre-incident levels. The rebound was not driven by a single bailout but by automated risk mechanics and community coordination. Aave’s dynamic interest rate curve spiked variable borrow APY to nearly 9%, discouraging new borrowing while attracting fresh deposits. Founder Stani Kulechov and risk managers like LlamaRisk and Aave Labs coordinated to slash WETH loan-to-value ratios across six networks to zero, isolating contagion. The DeFi United initiative raised over $300 million to backstop bad debt. After a multi-week audit confirming stability, LTV parameters were restored across Ethereum Core, Ethereum Prime, Arbitrum, Base, Mantle, and Linea.
The recovery demonstrates structural maturity in decentralized lending. Instead of permanent capital flight, suppliers returned once the exploit vector was isolated and risk frameworks were reviewed. This resilience signals to institutional allocators that Aave can withstand severe stress without state machine corruption. However, the incident leaves unresolved questions about nested risks from liquid staking derivatives—governance will likely revisit collateral caps and oracle designs.
