DeFi United Launches Recovery Plan for $292M Kelp DAO Exploit

A coalition of DeFi protocols and service providers has unveiled a technical recovery plan to restore backing for rsETH tokens following the $292 million exploit of Kelp DAO on April 18. DeFi United, led by Aave service providers, will convert ETH into rsETH in staged tranches and transfer the newly minted tokens to the affected lockbox contract, according to The Block.

The Kelp DAO breach, attributed to North Korea's Lazarus Group, represents one of the largest DeFi exploits in recent years. The attack drained the protocol's treasury and left rsETH holders facing significant losses as the liquid restaking token lost its full backing. The coordinated response from DeFi United marks a shift toward ecosystem-wide crisis management, similar to recovery efforts following the Poly Network exploit in 2021 and the Ronin Bridge hack in 2022.

DeFi United's technical approach centers on methodically restoring rsETH's collateral base. The restoration process involves converting ETH into rsETH in tranches, which will then be transferred to the affected lockbox contract. This staged approach aims to minimize market disruption while rebuilding the token's backing ratio. BeInCrypto reported that the coalition has released a detailed technical implementation plan outlining the mechanics and timeline for the recovery effort.

The tranche-based strategy reflects pragmatic constraints facing any large-scale DeFi recovery. Converting hundreds of millions of dollars in ETH to rsETH in a single transaction could trigger significant slippage and destabilize the token's price. By spreading conversions across multiple stages, DeFi United hopes to execute the recovery with minimal market impact. However, the phased approach also means affected users will face an extended period during which rsETH backing remains incomplete.

Several challenges cloud the recovery outlook. The success of DeFi United's plan depends heavily on market conditions and the ability to execute large conversions without prohibitive slippage. Questions persist about whether the recovery will fully compensate affected users or whether some losses will be permanent. Additionally, the involvement of a state-sponsored threat actor raises broader concerns about DeFi protocol security. The underlying vulnerability that enabled the Lazarus Group to access $292 million demands deeper scrutiny.

The recovery effort also highlights the limits of decentralized crisis response. While coalition coordination demonstrates ecosystem resilience, some observers question whether voluntary recovery mechanisms are sufficient when state-level actors are involved. Regulatory authorities and law enforcement agencies have successfully recovered stolen crypto in past cases, but the speed and effectiveness of such interventions remain unpredictable.

DeFi United's announcement signals that the ecosystem is committed to supporting affected users, but the path to full restoration remains uncertain. The coming weeks will reveal whether the coalition can execute the recovery plan on schedule and whether market conditions remain favorable for large-scale ETH-to-rsETH conversions. For rsETH holders and Kelp DAO users, the recovery plan offers hope but no guarantees of full restitution.

Sources

• The Block — Tier 1 crypto news outlet covering DeFi United's technical recovery plan for Kelp DAO exploit
• BeInCrypto — Tier 2 crypto news outlet providing context on rsETH backing recovery and Lazarus Group attribution