Aave, Kelp DAO Announce Full rsETH Operations Restoration

What happened
Aave and Kelp DAO have announced the full restoration of rsETH operations, concluding over a month-long recovery process following a significant security breach. The incident, which occurred on April 18, saw attackers exploit a vulnerability in Kelp DAO’s LayerZero-based cross-chain bridge, resulting in the theft of approximately $292 million worth of rsETH tokens. This represented around 18% of rsETH's circulating supply.
The exploit caused widespread disruption in the decentralised finance (DeFi) sector. Attackers subsequently used the stolen rsETH as collateral on the Aave lending platform to borrow approximately $192 million worth of Wrapped Ethereum (wETH). This forced major platforms, including Aave, SparkLend, and Fluid, to temporarily freeze markets to prevent further damage.
In the immediate aftermath, user panic led to an outflow of more than $13 billion from the DeFi sector. The stolen wETH became fragmented across over 20 different blockchains, creating significant bad debt within DeFi. In response, the Arbitrum Security Council successfully froze around $71 million worth of Ethereum tokens linked to the hacker on the Arbitrum One network, marking a crucial step in recovery efforts.
Aave and Kelp DAO, alongside other DeFi entities, launched the 'DeFi United' initiative. This program included plans to raise recovery funds through Aave's Recovery Guardian and Kelp's own safe. Crucially, the organisations also burned 117,132 of the exploiter's compromised rsETH tokens on Arbitrum. The final phase of restoration involved transferring 20,373 rsETH to the rsETH OFT adapter, refilling the bridge lockbox and fully restoring the token's backing.
Why it matters for Australian investors
The full restoration of rsETH operations is a significant development for Australian investors with exposure to DeFi protocols, particularly those engaged with Aave or Kelp DAO. While direct investment in rsETH might be niche, the stability of core DeFi infrastructure has broader implications for an ecosystem that Australian investors increasingly participate in through platforms like CoinSpot, Independent Reserve, Swyftx, and BTC Markets.
Such high-profile security incidents, and their subsequent resolution, influence investor confidence globally, including in Australia. The prompt and coordinated response from multiple DeFi entities, including the freezing of stolen assets by the Arbitrum Security Council, demonstrates a growing maturity in how the decentralised space addresses substantial threats. This can be reassuring for Australians concerned about the security of their digital assets.
For Australian investors holding cryptocurrencies that interact with or are exposed to DeFi lending platforms, the stability of protocols like Aave is paramount. Freezing of markets, as seen during the hack, can impact liquidity and access to funds. The successful restoration signals a return to normal operational capacity, which is crucial for maintaining a healthy and predictable investment environment.
Moreover, the nature of these incidents often prompts regulatory discussions. Australian bodies like ASIC and AUSTRAC closely monitor developments in the crypto space, particularly concerning consumer protection and financial stability. Successful recovery operations can positively inform these discussions, showcasing the industry's capacity for self-correction, even as the ATO continues to clarify tax implications for various DeFi activities.
Impact on the AUD market
While the rsETH hack and its resolution had a global impact on the DeFi sector, its direct, immediate effects on the Australian dollar (AUD) denominated cryptocurrency market are likely to be indirect. Australian crypto exchanges typically list major cryptocurrencies like Bitcoin and Ethereum, with a smaller selection of altcoins and DeFi tokens. The rsETH token itself is not a widely traded asset directly on Australian exchanges.
However, the broader sentiment in the global crypto market does influence AUD-denominated prices. A significant security incident causing market panic, such as the one in April, can lead to a general downturn across asset classes, including those trading against the AUD. Conversely, a successful resolution and restoration of confidence, as now announced, can contribute to a more stable or upward trend.
Australian investors with funds allocated to Ethereum or Wrapped Ethereum (wETH) might have felt a more tangible, albeit indirect, impact. The wETH bad debt created by the hack and the subsequent market freezes could have introduced volatility for these assets, which are readily available on Australian platforms. The resolution helps to mitigate some of these systemic risks.
Furthermore, the incident highlights the interconnectedness of global DeFi. Even if an Australian investor doesn’t directly hold rsETH, their exposure to the broader crypto ecosystem via other tokens or DeFi protocols means that systemic events can ripple through their portfolio. Maintaining robust security practices and understanding potential contagion risks are thus crucial for any Australian crypto participant.
What to watch next
While Aave and Kelp DAO have declared rsETH operations fully restored, some users are still reporting issues with hgETH tokens, another liquid token issued by Kelp DAO’s High Growth Vault. These users are struggling with bridging, converting, or withdrawing hgETH, prompting calls for a clear timeline for its full operational restoration. Kelp DAO has not yet provided a specific update on hgETH, though they have reopened other vaults like agETH.
Australian investors should monitor how Kelp DAO addresses these lingering hgETH issues. A comprehensive resolution across all affected assets would further bolster confidence in the protocol's recovery capabilities. Transparency and clear communication from the team will be crucial in reassuring the community and demonstrating a full return to stability.
Beyond Kelp DAO specifically, the broader response of DeFi protocols to security breaches remains a key area to watch. The 'DeFi United' initiative, and the collaboration seen in freezing stolen funds, sets a precedent. Future incidents will test whether this coordinated approach becomes standard practice, which is vital for the long-term resilience and investor protection in the decentralised space.
Finally, regulatory bodies in Australia and worldwide will be observing how these types of incidents are managed. The success of decentralised organisations in recovering from such a substantial hack may influence future regulatory frameworks. For Australian investors, this could mean ongoing adjustments to compliance requirements or tax guidance related to DeFi activities, making it essential to stay informed on both technical developments and regulatory shifts.
Coins covered
View ethEthereumethLive price, charts & AUD analysis
View arbArbitrumarbLive price, charts & AUD analysis
View btcBitcoinbtcLive price, charts & AUD analysis
View aaveAaveaaveLive price, charts & AUD analysis
View zroLayerZerozroLive price, charts & AUD analysis
View fluidFluidfluidLive price, charts & AUD analysis
View jstJUSTjstLive price, charts & AUD analysis
Common questions
What Australian crypto exchanges offer exposure to DeFi protocols like Aave?
Australian investors can access cryptocurrencies that interact with DeFi protocols such as Aave through regulated exchanges like CoinSpot, Independent Reserve, Swyftx, and BTC Markets. While some specific DeFi tokens might not be directly listed, investors can often acquire core assets like Ethereum (ETH) and Wrapped Ethereum (wETH) that are fundamental to participating in the broader DeFi ecosystem.
How does the ATO treat income from DeFi activities in Australia, like lending on platforms such as Aave?
The Australian Taxation Office (ATO) generally considers income generated from DeFi activities, including lending cryptocurrencies on platforms like Aave, as assessable income. This often falls under the category of 'ordinary income' or 'business income,' depending on the regularity and scale of the activity. It's crucial for Australian investors to keep detailed records and consult the ATO's official guidance or a tax professional for specific advice on their individual circumstances.
Are Australian investors protected if a DeFi platform is hacked like Kelp DAO?
Protection for Australian investors in the event of a DeFi platform hack can be complex. Unlike traditional financial institutions with government-backed guarantees, decentralised protocols operate under different legal and security frameworks. While efforts like 'DeFi United' aim to recover funds, there are no guarantees. It is essential for investors to understand the risks involved and perform thorough due diligence (DYOR) before engaging with any DeFi protocol.
Aave and Kelp DAO fully restore rsETH operations after a major hack. Discover what this means for Australian investors and the AUD crypto market.