Aave’s rsETH Crisis: Hacks and Haste

by

Key Highlights

  • The esteemed Aave protocol, in a moment of profound deliberation, has decreed the suspension of rsETH reserves across the realms of Ethereum Core, Arbitrum, Base, Mantle, and Linea.
  • This act, undertaken with the noble aim of aiding fund recovery, echoes the desperate measures of a man drowning in a sea of digital chaos.
  • Approximately 116,500 rsETH, conjured from a spoofed message, and 89,000 rsETH, pledged as collateral, now languish in the limbo of a protocol’s quandary.

Behold, the Aave protocol, that paragon of decentralized wisdom, has unveiled an update regarding the vexing issue of rsETH. The reserves of this token, once vibrant, now lie frozen, as if the very fabric of the blockchain had been ensnared in a net of misfortune.

As per the official proclamation disseminated via the digital forum of X on this fateful day, this decision was made to assist in the recovery of funds, a task as daunting as retrieving a needle from a haystack of cryptographic dust. The protocol, ever the vigilant guardian, vows to keep the community apprised of further developments, though one might wonder if such updates will arrive before the stars align.

Update on rsETH incident:

rsETH reserves have been paused across Ethereum Core, Arbitrum, Base, Mantle, and Linea.

This was done with the objective of recovering additional funds as the recovery plans progress.

We will keep the community updated on the next steps as the…

– Aave (@aave) April 23, 2026

The originating event

The event, a tale of treachery, originated from a hack targeting Kelp DAO’s rsETH bridge mechanism. A cunning trickster exploited the weakness of a LayerZero V2 bridge between Unichain and Ethereum, a bridge configured for 1-of-1 DVN, allowing a fraudulent message to be verified without the blessing of the originating network. Thus, the serpent coiled around the system, uncoiling chaos.

Consequently, about 116,500 rsETH tokens were unlocked through the Ethereum side of the bridge, a feat akin to opening Pandora’s box without the benefit of prior warning. The hacker, a master of deception, transferred the funds into various addresses, then deposited more than 89,567 rsETH tokens into Aave to secure the funds as collateral. A game of chess, indeed, where the pieces are digital and the stakes are eternal.

The hacker then proceeded to open lending positions on various networks, such as Ethereum and Arbitrum, a dance of risk that left the lending platforms trembling. According to reports, at least seven accounts are still lending out their rsETH in positions near or below the liquidation level, a perilous tightrope walk that threatens to plunge the entire system into disarray. Thus, the risk management team at Aave, ever the valiant knights, took swift action to avert catastrophe.

Set of precautionary measures

In turn, the Protocol Guardian and Risk Steward of Aave introduced a set of precautionary steps, as if warding off a plague. The first involved the suspension of the reserves of rsETH and wrsETH tokens on all Aave V3 networks, the establishment of an LTV ratio of zero, and the prohibition of borrowing and supplying the problematic assets. A fortress of security, yet one wonders if it will hold against the tide of digital tumult.

Meanwhile, the current positions will continue to be available for repayment and liquidation, a mercy granted to those ensnared in the web of their own ambition. To prevent a chain reaction from spreading further, changes were made to the interest rate models for WETH on multiple chains, whereas the reserves of WETH were frozen on selected markets. A delicate balance, indeed, between caution and chaos.

Further updates anticipated

In addition, the token related to Kelp DAO, known as rsETH, follows the bridge design, which is based on a lock-and-mint system. The attack threw off balance the ratio of locked and circulating tokens, a disruption as jarring as a symphony played on a broken instrument. How losses will be distributed across the bridges remains unclear, a mystery as deep as the ocean and as vast as the cosmos.

In response to this issue, the Aave protocol released an update, a beacon of hope in a sea of uncertainty. In particular, the protocol decided to suspend all reserve assets for the most prominent chains in order to minimize risks and continue recovery. Further updates are anticipated as investigation advances and stakeholders determine the upcoming course of action, though one might suspect that the path ahead is as murky as a fog-laden forest.

Read More

2026-04-23 22:31