Aave Completes First rsETH Recovery Phase, Starts Liquidity Restoration

Aave (AAVE) says it has completed the first phase of technical recovery for rsETH, a liquid restaking token impacted by a KelpDAO security incident. The key step: Aave burned the rsETH tokens held by the hacker on the Arbitrum (ARB) network, removing the immediate threat from compromised holdings. In the next stage, Aave plans to gradually restore liquidity by supplying funds to the LayerZero (ZRO) OFT adapter, a cross-chain messaging bridge used to support the safe return of assets and set up the resumption of rsETH services. Aave emphasized a phased process, restoring functionality only after each step is verified for security and stability. Background context: the hack occurred at KelpDAO and affected rsETH (representing staked ETH from Kelp’s liquid restaking), even though Aave itself was not directly breached. The incident underscores cross-chain interoperability and liquidity-token risk in DeFi. For traders, the rsETH recovery progress reduces near-term “stolen token” uncertainty, but the market may still price in execution risk until liquidity restoration is fully confirmed. Aave has not provided a specific end date for complete rsETH service resumption.
Neutral
This is a constructive but not fully de-risked update. The headline item—burning the hacker’s rsETH on Arbitrum—should reduce immediate market overhang and improve confidence that compromised balances can’t be reintroduced to trading or lending flows. That typically supports prices in the short run, similar to other “containment-first” incident responses seen in multi-chain DeFi. However, Aave still has execution steps ahead: gradual liquidity restoration via the LayerZero ZRO OFT adapter and a phased service resumption. Until those transfers are completed and verified end-to-end, traders may continue to face liquidity fragmentation, wider spreads, or delayed settlement—especially for tokens like rsETH that depend on cross-chain plumbing. Longer term, the process is a signal of improved incident response maturity (burning compromised tokens + using a structured cross-chain adapter). But because there is no finalized timeline for full restoration, the market reaction is more likely to be “relief / stabilization” than a decisive trend catalyst.