Aave Starts Phase II of rsETH Recovery After Liquidations
Aave has begun Phase II of its rsETH recovery plan after liquidating attacker-linked positions. Here is what changed, what users should track, and what comes next.
Aave has moved into Phase II of its rsETH recovery plan following the liquidation of attacker-linked positions, marking the next step in the protocol’s response to the Kelp DAO exploit that impacted rsETH backing.
The transition was formalized through Aave governance proposal #477, which outlined the operational steps required to proceed after attacker positions were cleared from the protocol.
What Triggered Aave’s Phase II rsETH Recovery
Phase II follows the completion of attacker position liquidations on Aave’s lending markets. The liquidation of these positions was a prerequisite established during Phase I, which focused on containing immediate risk exposure tied to the exploit.
The exploit itself targeted Kelp DAO’s rsETH, with DeFi United releasing a technical plan to restore rsETH backing after what it described as a $292 million incident. The recovery effort has involved coordination between Aave governance, Kelp DAO, and DeFi United.
TLDR KEYPOINTS
- Aave governance approved Phase II of the rsETH recovery plan via Proposal #477
- Attacker-linked positions on Aave were fully liquidated, clearing the path forward
- DeFi United published a technical restoration plan following the $292 million Kelp DAO exploit
Liquidation Outcome
The liquidation of attacker-controlled positions removed the immediate protocol risk that had prompted emergency measures during Phase I. With those positions closed, Aave’s rsETH markets are no longer directly exposed to the exploiter’s collateral.
Governance Handoff
The governance proposal signals a shift from emergency response to structured recovery. Aave’s decentralized governance process now oversees the remaining steps, with the proposal passing through the protocol’s standard voting mechanism on the Aave governance portal.
What Phase II Changes for rsETH Markets and Aave Users
With attacker positions cleared, the immediate concern for Aave users shifts from exploit-related contagion risk to the practical process of restoring normal rsETH market conditions.
Why Liquidation Completion Matters
While attacker positions remained open, they represented a source of unpredictable selling pressure and collateral instability. Their liquidation removes that overhang, allowing pool parameters and risk settings to be evaluated against normal market conditions rather than exploit-driven distortions.
Borrower and Supplier Impact
Users with active rsETH positions on Aave should monitor any parameter changes that governance implements as part of Phase II. Pool caps, liquidation thresholds, and interest rate curves may be adjusted as the protocol transitions back to standard operations. In the broader DeFi landscape, events like Bybit’s recent delisting of SYN from futures trading underscore how protocols and exchanges respond swiftly to risk events.
What to Watch Before Recovery Is Fully Closed
Phase II is not the final step. Several conditions must be met before the rsETH recovery can be considered complete.
Near-Term Checkpoints
- Execution of the technical restoration plan published by DeFi United
- Full restoration of rsETH backing to pre-exploit levels
- Any additional governance proposals adjusting Aave risk parameters
- Confirmation that no residual attacker positions remain across related protocols
Completion Signals
Normalization would be indicated by rsETH returning to its expected peg, Aave risk parameters reverting to standard settings, and no further emergency governance actions being required. Users should track Aave governance proposals and DeFi United updates for progress on the restoration timeline.
The structured, multi-phase approach reflects a pattern increasingly common in DeFi incident response, where protocols compartmentalize recovery into discrete, governable steps rather than attempting a single corrective action.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
Defiliban · Lucille Rosario
Lucille Rosario
@lucille-rosario