Kelp Dao Aave Resume Rseth

Kelp DAO and Aave said they will resume rsETH operations in the coming days, following successful first recovery steps.
Kelp was exploited on April 18 for $292 million from attackers suspected to be part of North Korea’s Lazarus Group.

We'd love your feedback.

Take a 30-second survey to help improve The Block.

Start Survey

Kelp DAO and Aave announced that they will resume rsETH-related operations in the coming days after successful first recovery steps following the $292 million exploit last month.

On Tuesday, Kelp wrote on X that 117,132 rsETH, the amount stolen on April 18, will be progressively refilled from Aave Recovery Guardian and Kelp Recovery Safe into the LayerZero OFT adapter on mainnet over the next two weeks.

"Kelp will unpause withdrawals, tentatively within 24 hours, after the first tranche to the LayerZero OFT adapter," Kelp said, explaining that all rsETH operations — including deposits, redemptions, bridging, and claims — will resume as usual after smart contracts are unpaused.

Kelp also said that it has completed a security update across all LayerZero bridging configurations — changing verification to require four independent attestors, raising block confirmations from 42 to 64, and deprecating all L2-to-L2 routes.

The DeFi protocol added that it is currently in the process of migrating to Chainlink's CCIP from LayerZero, as announced earlier.

Meanwhile, Aave also confirmed that the first steps of the rsETH recovery plan are complete, including burning the exploiter's rsETH on Arbitrum.

"Progressively refilling the LayerZero OFT adapter and reopening rsETH operations will follow over the coming days," Aave wrote.

Restoration efforts

The April 18 attack on Kelp remains the largest DeFi security breach of 2026, with the attacker widely identified as North Korea's Lazarus Group. Soon after the attack, the exploiter moved a significant portion of the stolen rsETH to Aave as collateral for WETH, creating about $190 million in bad debt for the protocol.

This prompted Aave to lead an industry-wide restitution initiative called DeFi United, which raised over $300 million in ETH Image 6: Tooltip token image ETH+1.40% Image 7: Tooltip token image ETH+1.40%

$2,319.53

See Details — enough to mitigate further impact on the DeFi sector.

Start your day with the most influential events and analysis happening across the digital asset ecosystem.

[x] Also receive The Funding, Layer One, and our weekly Data & Insights newsletters

By signing up, you agree to our Terms of Service and Privacy Policy.

Earlier, the Arbitrum Security Council had secured a large chunk of stolen funds by freezing around $72 million worth of the attacker's ETH on Arbitrum and proposed transferring the funds to the restitution initiative.

On May 1, however, multiple plaintiffs from separate years-old terrorism judgments against North Korea filed an order restricting Arbitrum DAO from moving the recovered funds as they sought to claim the frozen ETH as restitution.

Although the Arbitrum DAO approved the proposal last week, the restraining order had left the $72 million transfer in limbo.

In response to the order, Aave LLC filed an emergency motion in federal court to challenge the ruling, arguing that it was based on unproven speculation that Lazarus carried out the Kelp DAO exploit.

As a result, the court allowed Arbitrum to transfer ETH to Aave, though Aave will still be barred from selling or moving the funds until court approval.

LayerZero takes responsibility

Amid Arbitrum and Aave's efforts to contain the fallout from the Kelp DAO exploit, LayerZero has recently issued a public apology for its handling of the situation.

Initially, LayerZero blamed Kelp DAO for using a 1-of-1 DVN setup against its recommendations, while Kelp argued that the single-point setup was the default on LayerZero-powered apps.

LayerZero acknowledged that it made a mistake by allowing 1-of-1 DVN configurations for high-value transactions and thereby unknowingly created security risks.

Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.

Will the AAVE TVL go below $10B in 2026?

40%

chance

Yes

$100 $250

$100 $167

$420 Vol.

Ends in 7 months

View Polymarket

Odds are provided for informational purposes by our partner, Polymarket, and are subject to change. The Block is not a prediction market operator and is not responsible for any financial losses.

ASSETS MENTIONED IN THIS ARTICLE

Image 10: Tooltip token image ETH+1.4%

AUTHOR

Image 11: Danny Park ### Danny Park

Danny Park is an East Asia reporter at The Block writing on topics including Web3 developments and crypto regulations in the region. He was formerly a reporter at Forkast.News, where he actively covered the downfall of Terra-Luna and FTX. Based in Seoul, Danny has previously produced written and video content for media companies in Korea, Hong Kong and China. He holds a Bachelor of Journalism and Business Marketing from the University of Hong Kong.

SEE AUTHOR

CONNECT ON

EDITOR

To contact the editor of this story: Timmy Shen at tshen@theblock.co

WHO WE ARE

The Block is a news provider that strives to be the first and final word on digital assets news, research, and data.

+ Follow us on Google News Partner with us

CONNECT WITH THE BLOCK ON

More by Danny Park

[![Image 12: Korean won stablecoin KRWQ expands to Solana following March EDX Markets listing](https://www.tbstat.com/cdn-cgi/image/f=avif,q

crypto-article-kelp-dao-aave-resume-rseth

Kelp Dao Aave Resume Rseth

Kelp DAO, Aave to resume rsETH operations as recovery from $292 million exploit progresses | The Block

Latest Crypto News

Korean won stablecoin KRWQ expands to Solana following March EDX Markets listing

Japan's enterprise-led blockchain to issue yen stablecoin for B2B settlements

Charles Schwab launches spot BTC, ETH trading to select retail clients

First-ever Hyperliquid ETF launches, posts 'very solid' first day of trading: analyst

Kelp DAO, Aave to resume rsETH operations as recovery from $292 million exploit progresses

Quick Take