Kelp DAO and Aave have announced plans to resume rsETH operations within the coming days, marking a cautious return to activity after a significant security breach. The protocol was exploited on April 18 for $292 million, with attackers suspected to be affiliated with North Korea's Lazarus Group.
The two protocols say the first recovery steps have been completed successfully, though full operational normalcy has not yet been declared. The Lazarus Group attribution, if confirmed, would place this among the more consequential DeFi exploits tied to state-sponsored actors — a pattern regulators and institutional participants have been tracking closely.
For rsETH holders and Aave users with exposure, the resumption timeline and any details around fund recovery or compensation will be the key metrics to watch in the days ahead.
Frequently asked questions
-
What specific recovery steps have Kelp DAO and Aave completed after the exploit?
Kelp DAO and Aave have successfully completed initial recovery steps, but full operational normalcy has not yet been declared.
-
How might the Lazarus Group's involvement impact future regulatory actions in DeFi?
The attribution of the exploit to the Lazarus Group highlights concerns over state-sponsored attacks, which regulators and institutional participants are closely monitoring.
TheBlock