Kelp DAO and Aave set to resume rsETH operations as $292M exploit recovery gets underway

Kelp DAO and Aave have announced plans to resume rsETH operations within the coming days, marking a cautious return to activity after a significant security breach. The protocol was exploited on April 18 for $292 million, with attackers suspected to be affiliated with North Korea's Lazarus Group.

The two protocols say the first recovery steps have been completed successfully, though full operational normalcy has not yet been declared. The Lazarus Group attribution, if confirmed, would place this among the more consequential DeFi exploits tied to state-sponsored actors — a pattern regulators and institutional participants have been tracking closely.

For rsETH holders and Aave users with exposure, the resumption timeline and any details around fund recovery or compensation will be the key metrics to watch in the days ahead.