Kelp DAO and Aave Advance rsETH Recovery After $293M Hack

Kelp DAO, an Ethereum liquid restaking platform, has taken significant steps to recover its ecosystem following a $293 million exploit in April. In collaboration with decentralized lending protocol Aave, the project has burned the hacker’s stolen rsETH tokens and is initiating a two-week recovery process to replenish the backing for its liquid staking token.

The exploit, linked to the North Korea-affiliated Lazarus Group, targeted Kelp’s rsETH adapter bridge contract. This drained approximately 117,132 rsETH, valued at $278 million, from the protocol. Kelp has now confirmed that the stolen tokens were destroyed on the Arbitrum network, while recovery funds are being progressively refilled through the Aave Recovery Guardian and Kelp’s own recovery wallets.

Kelp DAO has assured users that rsETH, which currently maintains a $1.5 billion market cap, remains fully collateralized across Ethereum mainnet and layer-2 networks. Withdrawals and other operations, including deposits and bridging, are set to resume within 24 hours after the first tranche of recovery funds is injected into the smart contract.

Security Enhancements and Bridging Updates

To prevent future exploits, Kelp has implemented a “security hardening pass,” requiring four independent attestors and 64 block confirmations for bridging operations. Additionally, the protocol is migrating to Chainlink’s Cross-Chain Interoperability Protocol (CCIP) to further bolster its cross-chain security.

Kelp’s recovery efforts are critical for users impacted by what has been one of the most significant DeFi exploits of 2026. Blockchain security firm OpenZeppelin previously noted that the attack did not exploit a smart contract bug but highlighted operational lapses, a risk often underestimated in the DeFi sector.

Market Impact and Trader Sentiment

Despite the exploit, Kelp remains a major player in Ethereum’s liquid restaking space, built on EigenLayer, with a total value locked (TVL) of $1.55 billion as of now. However, this figure has dropped 26% since its peak of $2 billion in September 2025, according to DeFiLlama.

Meanwhile, the broader market has shown resilience. ETH derivatives traders have not turned bearish despite recent DeFi failures, although Ether spot prices dipped 1% to a 12-day low of $2,260 on Tuesday. This suggests that while confidence in specific protocols may waver, Ethereum’s underlying ecosystem remains robust.

Kelp’s swift response, bolstered by Aave and other DeFi players, represents a critical step toward restoring trust in the protocol and mitigating the long-term fallout of the hack.

Image source: Shutterstock