Aave has restored wrapped ether borrowing limits to normal levels, marking a turning point in what became DeFi’s most severe credit crisis in years. The move comes roughly a month after the protocol slashed collateral caps in response to a $230 million exploit that threatened to unwind billions in leveraged positions across the Ethereum ecosystem.
The restoration signals that risk managers at the largest decentralized lending protocol believe the immediate contagion threat has passed. But the episode left scars: billions in deposits fled to safer ground, borrowing rates spiked to levels not seen since the 2022 bear market, and the sector was forced into an unprecedented coordinated bailout that tested whether DeFi could actually function as a self-healing financial system.
The Exploit That Broke Confidence
The crisis traces back to an attack on Kelp DAO, a restaking protocol that issued rsETH, a liquid staking derivative backed by staked ether. When attackers drained $230 million from a cross-chain bridge connecting Kelp’s operations across multiple networks, the backing for rsETH immediately came into question.
This mattered enormously for Aave because rsETH had become popular collateral. Borrowers had deposited the token to take out loans in USDC, DAI, and wrapped ether, creating a web of leveraged positions that depended on rsETH maintaining its peg to ETH. Once that peg wobbled, the math behind thousands of loans stopped working.
Aave’s response was swift but disruptive. The protocol’s risk team implemented emergency collateral limits that effectively froze new borrowing against wrapped ether (WETH) and slashed the loan-to-value ratios on several correlated assets. The reasoning was defensive: if rsETH holders rushed to unwind their positions simultaneously, the resulting liquidation cascade could drain liquidity from the protocol faster than it could be replenished.
The restrictions worked as intended, but the side effects were brutal. Legitimate borrowers found themselves unable to access capital. Yield farmers who had been earning steady returns on stablecoin deposits watched their yields spike briefly before collapsing as utilization rates whipsawed. One analysis of the immediate aftermath showed Aave stablecoin yields spiking to 13.4% as the market repriced risk in real time.
How a $300 Million Rescue Came Together
What followed was arguably DeFi’s most coordinated emergency response to date. Within days of the exploit, Aave’s team began organizing what became known as the DeFi United fund, a pooled resource intended to cover bad debt and reassure depositors that their funds remained safe.
The coalition that formed was notable for its breadth. Consensys, the Ethereum development studio behind MetaMask, committed significant resources. Lido, the dominant liquid staking provider, joined to protect the broader staking derivative ecosystem from reputational damage. Mantle, the layer-2 network backed by Bybit, contributed what eventually totaled over $127 million in direct funding.
By mid-April, the DeFi United fund had crossed $303 million in pledges, exceeding initial targets. The commitments came in various forms: some were outright grants, others were credit lines that would only be drawn if needed, and some were deposits structured to provide liquidity backstops.
The fund’s existence shifted the psychology of the crisis. Depositors who had been withdrawing paused. Borrowers who had been preparing for forced liquidations found breathing room. And importantly, the rsETH market stabilized as participants realized that even if some redemptions failed, a backstop existed to absorb the losses.
What the Restoration Actually Means
Restoring WETH collateral limits is more than a technical adjustment. It represents Aave’s risk committee concluding that the rsETH market has returned to a state where normal lending operations can resume without excessive systemic risk.
The practical effect is that borrowers can once again use wrapped ether as collateral at standard loan-to-value ratios, currently around 80% for ETH-denominated loans. This unlocks capital that had been frozen during the crisis and allows traders to re-establish leveraged positions they may have been forced to close.
For the broader DeFi sector, the move suggests that the worst of the liquidity drain has reversed. The derivatives market had shown signs of stress during the peak of the crisis, with funding rates turning sharply negative as traders positioned defensively. Those rates have since normalized, suggesting that the restoration of borrowing limits reflects underlying market healing rather than wishful thinking from protocol managers.
Still, the recovery comes with caveats. Aave has not restored all parameters to pre-crisis levels. Certain correlated assets remain under heightened scrutiny, and the risk committee has indicated that additional governance proposals may follow to permanently adjust how liquid staking derivatives are treated as collateral.
Lessons the Exploit Taught DeFi
The rsETH crisis exposed a vulnerability that DeFi protocols had theorized about but never experienced at scale: what happens when correlated collateral fails simultaneously across multiple lending positions?
Traditional finance has circuit breakers and centralized interventions to handle such scenarios. DeFi’s selling point has always been that markets can self-correct through liquidation mechanisms. The rsETH episode tested that thesis, and the results were mixed.
On one hand, liquidations did fire. Undercollateralized positions were closed, and the protocol’s automated systems prevented the kind of catastrophic insolvency that might have occurred in a less well-designed system. On the other hand, the speed of the crisis outpaced what any automated system could cleanly handle. The emergency collateral limits were a manual intervention, decided by human risk managers and implemented through governance shortcuts that bypassed normal voting timelines.
The DeFi United fund was an even more striking departure from the automated ideal. It was essentially a bailout, organized by major stakeholders who recognized that the alternative (letting the crisis run its course) would damage the sector’s credibility with institutional capital that had only recently begun flowing into decentralized lending.
What Happens to Kelp DAO Now
The protocol at the center of the exploit faces an uncertain future. While the immediate crisis has passed, Kelp DAO’s reputation took severe damage. Users who held rsETH watched their positions become functionally frozen during the worst of the panic, unable to redeem for underlying ETH at a time when every hour mattered.
The $230 million in losses created obligations that the DeFi United fund will partially cover, but Kelp’s own treasury was depleted by the attack. Governance discussions have floated various restructuring proposals, including a potential merger with a larger restaking protocol that could absorb the operational overhead of maintaining rsETH while providing fresh capital.
For users considering liquid staking derivatives as collateral going forward, the episode offers a stark lesson: not all ETH derivatives carry equal risk. The largest providers like Lido (stETH) and Coinbase (cbETH) have deeper liquidity and more established redemption mechanisms. Smaller or newer derivatives may offer higher yields but carry correspondingly higher tail risks that become relevant exactly when you least want them to.
Aave’s own documentation is likely to reflect these distinctions more explicitly going forward. Risk committee members have indicated that future collateral listings will undergo more rigorous evaluation of bridging dependencies, redemption liquidity, and oracle reliability, the three factors that combined to make rsETH’s failure so damaging.
The Arbitrum Angle Remains Unresolved
One thread of the rsETH story remains open: a governance dispute over frozen exploit funds held on Arbitrum. The layer-2 network’s DAO has been debating a binding vote to transfer approximately $71 million in ETH that was recovered or frozen during the exploit into Aave LLC custody.
The Arbitrum DAO began that binding vote earlier this month, but the outcome remains uncertain. Some delegates argue that moving the funds to Aave’s legal entity creates jurisdictional complications that could invite regulatory scrutiny. Others counter that leaving the funds in a limbo state benefits no one and prevents the affected parties from reaching final resolution.
If the transfer passes, it would add to the resources available for covering remaining bad debt and potentially allow Aave to close the DeFi United chapter with a cleaner balance sheet. If it fails, the funds could remain frozen indefinitely while legal and governance debates continue.
A Sector Testing Its Limits
The restoration of borrowing limits at Aave marks an important psychological milestone, but it does not erase what the past month revealed about decentralized finance. The sector handled a serious crisis without catastrophic failure, which is worth noting. At the same time, it required coordinated intervention from major stakeholders, emergency governance actions, and what amounted to a $300 million bailout fund to achieve that outcome.
Whether this represents strength or weakness depends on your perspective. Optimists see a sector that bent but did not break, adapting in real time to a novel threat and emerging with valuable lessons. Skeptics see a system that required the very kind of centralized coordination it claims to make unnecessary.
Both readings contain truth. DeFi is neither the pure algorithmic utopia its most fervent advocates describe nor the house of cards its critics predict will eventually collapse. It is a financial infrastructure in early development, stress-testing itself in public with real capital at stake.
The rsETH crisis will likely accelerate changes already underway: stricter collateral evaluation, better insurance mechanisms, and clearer governance procedures for emergency situations. Protocols that learn from this episode will be harder to break next time. Those that ignore its lessons will eventually provide the next case study.
For users and builders in the DeFi space, the takeaway is uncomfortable but important: decentralization does not eliminate risk, it redistributes it. And when that risk materializes, the response will be as messy and human as anything in traditional finance. That is neither good nor bad. It is simply how financial systems work when real money is on the line.
Aave’s borrowing limits are back to normal. The sector moves on. But the scars remain visible to anyone willing to look.
