
Arkham: DeFi United wallet reaches about $160M toward Aave’s $200M rsETH recap
Mantle and Aave DAO account for a combined 55,000 ETH, while Stani Kulechov pledged 5,000 ETH personally.
An Aave-linked recovery wallet tied to “DeFi United” has accumulated about $160 million toward a roughly $200 million target to cover bad debt linked to the KelpDAO rsETH exploit. The funding is concentrated among a few large backers, as the protocol works to stabilize impaired collateral after a reported $10 billion withdrawal wave.
Key Takeaways
- Roughly $160 million has flowed toward a ~$200 million recapitalization target tied to the defiunited.eth recovery wallet.
- Mantle and Aave DAO are the dominant backers so far, together contributing 55,000 ETH valued around $127 million.
- Aave founder Stani Kulechov pledged a personal 5,000 ETH contribution, valued at about $11.73 million at roughly $2,346 per ETH.
- The KelpDAO incident involved minting 116,500 unbacked rsETH via a LayerZero integration vulnerability and was followed by $10 billion in withdrawals.
DeFi United Wallet Nears the $200M Recap Target
The cleanest fact in this story is on-chain direction of travel. Funds associated with defiunited.eth, an ENS-mapped address used as the aggregation point for the DeFi United recovery effort, have reached about $160 million toward a roughly $200 million target.
That puts the recap around 80% funded, at least by the tracking disclosed so far. In market-structure terms, this matters because it frames the response as a near-term containment operation, not a drawn-out restructuring where uncertainty becomes the product. When a lending venue is carrying bad debt, time is the enemy. The longer the shortfall sits unresolved, the more it bleeds into pricing of risk across the rest of the stack.
The stated purpose of the raise is narrowly defined: cover bad debt tied to the KelpDAO exploit and stabilize the system by recapitalizing rsETH support. “Bad debt” here is the protocol-level shortfall created when collateral becomes insufficient or impaired and loans can’t be made whole through normal liquidation mechanics.
Who’s Funding the Backstop: Mantle, Aave DAO, and Stani’s 5,000 ETH
The backstop is not broadly distributed. The largest contributors identified so far are Mantle and Aave DAO, which together raised 55,000 ETH, valued at about $127 million. That single combined figure is most of the progress toward the $200 million target.
What stands out is the concentration risk embedded in that fact. If the recap’s success depends on a small number of large backers following through, then confidence is less about “community support” and more about whether a few balance sheets and governance processes stay aligned under stress.
Stani Kulechov added a separate, highly visible signal: “I’m personally contributing 5,000 ETH to DeFi United as we continue working together with partners,” he said. At an ETH price of roughly $2,346, that personal commitment was valued at $11,730,000.
Insider capital doesn’t fix broken collateral by itself, but it can change the psychology of a recap. In a run dynamic, participants are not only pricing solvency. They are pricing coordination. A founder writing a large check is a coordination signal, even if it is small relative to the combined Mantle and Aave DAO figure.
One important caveat for traders is that the public figures do not fully resolve “received versus pledged.” The disclosures describe amounts raised and also refer to contributors having pledged ETH. Without a clean breakdown of what has arrived at defiunited.eth versus what is committed but pending, the market is left to infer completion risk.
How the rsETH Mint Broke Collateral and Sparked a $10B Exit
The exploit path described is specific and ugly in the way DeFi credit events often are. The incident was traced to a KelpDAO integration vulnerability with LayerZero, where an attacker minted 116,500 unbacked rsETH.
rsETH is described as a yield-bearing derivative token of ether used as collateral. When unbacked units are minted into circulation, the collateral base becomes contaminated. A lending market can tolerate volatility. It cannot tolerate collateral that is structurally not what it claims to be.
That contamination is what turned a security breach into a credit event for Aave. The unbacked rsETH left Aave with impaired collateral, and the response was a classic liquidity reflex: a run on deposits as lenders rushed to exit. Withdrawals ultimately totaled $10 billion.
The breach itself was described as $292 million and characterized as the year’s largest DeFi exploit. The second-order effect is the key point. The headline loss number is one thing. The $10 billion exit is the market telling you it was not confident the system would self-heal quickly.
The recovery effort is explicitly framed as “focused mostly on stabilizing the system with a coordinated bailout to recapitalize rsETH and mitigate losses.” That language matters because it places the goal on restoring a collateral standard and preventing further confidence-driven outflows, not merely patching a bug.
The Remaining Gap and the On-Chain Verification Questions Traders Still Have
The math is straightforward. If about $160 million is in, roughly $40 million remains to reach the ~$200 million target.
The verification questions are less straightforward, and they are the ones that will drive risk perception in the near term.
First, on-chain updates need to show whether the remaining ~$40 million actually arrives at defiunited.eth. Traders will care about receipts, not intentions, because the difference between “pledged” and “received” is where recap efforts fail.
Second, the combined 55,000 ETH figure for Mantle and Aave DAO is directionally useful but incomplete. Any disclosure that breaks out Mantle versus Aave DAO contributions would reduce uncertainty around who is carrying the recap and how dependent the outcome is on a single actor.
Third, the recap is supposed to restore support for rsETH. Signals that rsETH support is being restored as intended, tied to recapitalization progress and stabilization steps, will be the practical proof that the money is doing what it was raised to do.
Finally, the vulnerability path itself is still a live variable. Further detail on the KelpDAO–LayerZero integration vulnerability, and whether additional affected venues or collateral impairments are identified, will determine whether this is a contained bad-debt plug or the first invoice in a larger clean-up.
What This Recap Means for Aave Risk Perception and DeFi Credit Conditions
I read this as a liquidity and confidence operation with a clear deadline, not a slow-motion governance saga. Getting to ~$160 million of a ~$200 million target quickly is the point. It compresses the window where depositors and lenders can justify “wait and see” withdrawals.
The market-relevant detail is concentration. Mantle and Aave DAO together at 55,000 ETH (about $127 million) means the recap’s credibility is heavily tied to a small number of decision centers. If those flows are already received at defiunited.eth, the risk premium should compress because the backstop becomes observable. If they are still partially pledged, the market will keep pricing completion risk until the wallet balance proves otherwise.
The $10 billion withdrawal figure is the other anchor. A run of that size is not about a single exploit. It’s about trust in collateral quality and liquidation outcomes. The recap’s job is to re-establish a credible collateral floor for rsETH and remove protocol-level bad debt that can’t be liquidated away.
Scenario one is the clean one: the remaining ~$40 million arrives on-chain, the large contributors’ amounts are clearly attributable, and rsETH support restoration is communicated alongside the recap progress. In that case, the event becomes a contained credit incident with a defined plug, and the second-order effect is tighter DeFi credit conditions easing back toward normal as uncertainty clears.
Scenario two is the messy one: the wallet stalls below target, or the market learns that a meaningful portion of the headline number was pledged rather than received. That keeps the system in a limbo where counterparties continue to treat Aave-adjacent collateral as suspect. The confirmation point here is simple and objective: does defiunited.eth actually reach the ~$200 million target with traceable inflows.
Scenario three is the tail risk: new disclosures expand the scope of the KelpDAO–LayerZero integration issue and identify additional venues or collateral impairments. That would turn a single-protocol recap into a broader collateral repricing event, and the $292 million breach label starts to look like a floor rather than a ceiling.
My synthesis is that this recap is designed to buy back certainty in a market that just demonstrated it can pull $10 billion of deposits when collateral integrity is questioned, and the thesis is confirmed if defiunited.eth visibly closes the remaining ~$40 million gap with received on-chain inflows rather than open-ended pledges.