A coalition of decentralized finance projects has stepped in to stabilize the ecosystem after the massive Kelp DAO exploit, pledging tens of thousands of Ether to help restore losses and prevent further contagion.

DeFi Unites to Address $293M Shock

Following the $293 million exploit of Kelp DAO, several major protocols have joined a recovery initiative led by Aave.

The effort, dubbed “DeFi United,” has now secured over 43,500 ETH in pledged support, worth more than $100 million.

Protocols participating include:

• Lido DAO
• Golem Foundation
• EtherFi Foundation
• Mantle
• LayerZero
• Ink Foundation
• Tyrdo

Aave said the collaboration reflects how critical coordinated action is during systemic stress events.

How the Crisis Unfolded

The attack saw hackers steal over 116,500 rsETH tokens from Kelp DAO’s bridge and use them as collateral on Aave to borrow liquidity.

This resulted in:

• Around $195 million in bad debt on Aave
• A sharp drop in liquidity across lending markets
• Widespread withdrawals and market instability

The incident highlighted how interconnected DeFi protocols can amplify risk.

Major Contributions to the Recovery Effort

Several protocols have already outlined concrete contributions:

• Mantle proposed lending up to 30,000 ETH to Aave
• EtherFi Foundation pledged 5,000 ETH
• Golem Foundation and Golem Factory jointly offered 1,000 ETH
• Lido DAO proposed up to 2,500 stETH, conditional on full funding

Additionally, Aave founder Stani Kulechov personally pledged 5,000 ETH to support the effort.

Other contributors have committed funds but have not yet disclosed exact amounts.

Efforts to Contain Further Damage

To limit the fallout, Aave has taken precautionary steps:

• Paused rsETH reserves across multiple networks
• Restricted further borrowing against affected assets
• Coordinated with partners on recovery plans

Meanwhile, Arbitrum froze over 30,000 ETH linked to the exploit in an emergency move.

However, analysts estimate that a significant portion of the stolen funds has already been laundered.

A Critical Moment for DeFi

The “DeFi United” response represents one of the largest coordinated recovery efforts in decentralized finance.

It underscores:

• The importance of ecosystem collaboration
• The risks of interconnected protocols
• The need for stronger security practices

While the recovery is still ongoing, the initiative may help restore confidence and prevent further systemic damage.

A US Army soldier is facing serious criminal charges after allegedly using classified military information to profit from bets placed on a prediction market platform.

Insider Knowledge Used for Betting

According to the US Department of Justice, Master Sergeant Gannon Ken Van Dyke was involved in planning and executing a military operation that led to the capture of Nicolás Maduro in January.

Prosecutors allege that Van Dyke used this insider knowledge to place bets on Polymarket, including contracts tied to:

• Maduro being removed from power
• Potential US military actions in Venezuela

Authorities say he placed multiple bets before the operation became public and ultimately made more than $400,000 in profit.

Attempt to Cover Tracks

Investigators claim Van Dyke took steps to conceal his actions, including:

• Requesting Polymarket to delete his account
• Moving funds through cryptocurrency channels
• Changing account details to obscure his identity

He allegedly transferred a large portion of his profits to external accounts before converting them into traditional financial assets.

Charges and Legal Consequences

Van Dyke now faces multiple charges, including:

• Wire fraud
• Commodities fraud
• Theft of government information
• Unlawful use of confidential information

Some of these charges carry potential prison sentences of up to decades, reflecting the severity of using classified intelligence for personal gain.

First Major Insider Trading Case in Prediction Markets

Officials say this may be the first major US case of insider trading linked to a prediction market, marking a turning point for regulation in this emerging sector.

The Commodity Futures Trading Commission has also taken action, highlighting concerns about how easily confidential information can be monetized through such platforms.

Polymarket Responds

Polymarket stated that it detected suspicious activity tied to the case and cooperated with authorities.

The platform emphasized that:

• Insider trading is not tolerated
• Monitoring systems are in place to detect misuse
• The case demonstrates enforcement mechanisms are working

Broader Concerns Around Prediction Markets

The incident has intensified scrutiny of prediction markets, which allow users to bet on real-world events.

While these platforms have gained popularity, critics argue they may:

• Enable trading on non-public or sensitive information
• Create ethical concerns around betting on geopolitical or military events
• Require stronger regulatory oversight

A Warning for the Industry

The case underscores a growing risk as financial innovation intersects with sensitive information.

Authorities made it clear that:

• Using classified data for profit is illegal, regardless of the platform
• Blockchain-based or decentralized systems do not provide immunity
• Enforcement is catching up with new financial technologies

The fallout from the recent Kelp DAO exploit continues to ripple across the crypto ecosystem, with LayerZero pointing to a flawed system setup as the root cause of the attack.

Single Point of Failure Led to Exploit

LayerZero said the breach stemmed from how Kelp DAO configured its decentralized verifier network (DVN).

The attacker drained roughly 116,500 rsETH, valued at nearly $293 million, from Kelp’s LayerZero-powered bridge.

According to LayerZero:

• Kelp relied on a 1/1 DVN setup, meaning only one verifier was used
• This created a single point of failure
• Prior recommendations to diversify verifiers were not followed

As a result, the attacker was able to exploit the system without needing to bypass multiple verification layers.

LayerZero Distances Itself

LayerZero stressed that the issue was not a flaw in its protocol, but rather how Kelp implemented it.

The company is now:

• Urging all projects to adopt multi-DVN configurations
• Warning it may stop supporting apps that continue using single-verifier setups

Aave Hit With $195M in Bad Debt

The impact quickly spread to Aave, where the attacker used stolen assets as collateral to borrow funds.

This led to:

• Around $195 million in bad debt
• A sharp drop in Aave’s total value locked
• Billions withdrawn by users amid rising concerns

Liquidity issues have also emerged, especially around Ether-based lending pools.

Liquidity Risks Raise Alarm

Reduced liquidity on Aave is now creating additional risks.

Analysts warn that:

• Markets are nearing 100% utilization
• A 15% to 20% drop in Ether price could trigger further instability
• Liquidations may fail under current conditions

To limit further damage, Aave has frozen rsETH markets across its platforms.

Who Covers the Losses?

With no clear recovery plan, debate has intensified over who should absorb the losses.

Suggestions from industry figures include:

• Negotiating with the attacker for a partial return of funds
• Using ecosystem funds to cover losses
• Spreading losses across users
• Attempting a rollback to pre-hack balances

Each option carries trade-offs, and no consensus has emerged.

Broader Implications for DeFi

The incident highlights how interconnected DeFi protocols can amplify risk.

A vulnerability in one protocol can quickly:

• Spill into lending markets
• Trigger liquidity crises
• Impact multiple platforms simultaneously

Security Practices Under Scrutiny

LayerZero’s criticism of Kelp’s setup underscores a key lesson: security configurations matter as much as the underlying technology.

As protocols grow more complex, ensuring robust multi-layer verification systems may become essential to preventing similar exploits.