DeFi United moves to unlock frozen ETH

TLDR

A coalition of leading DeFi protocols called DeFi United is asking Arbitrum DAO to release over 30,000 ETH that was frozen after the recent KelpDAO rsETH bridge exploit.

1. A bridge bug in KelpDAOs rsETH system led to a roughly 292 million dollar exploit, after which Arbitrums Security Council froze about 30,765 ETH tied to the attacker.
2. Aave, KelpDAO, LayerZero, EtherFi, and Compound filed a governance proposal for Arbitrum to send the frozen ETH to a DeFi United recovery multisig focused on compensating rsETH users.
3. The outcome will set a precedent for how L2 governance handles emergency freezes, bad debt, and user restitution after large DeFi hacks.

Deep Dive

1. How The ETH Was Frozen

The incident began with a vulnerability in KelpDAOs rsETH Unichain-to-Ethereum bridge that released 116,500 rsETH on Ethereum without a matching burn on the source chain, creating a backing shortfall of about 76,127 rsETH and enabling a roughly 292294 million dollar exploit linked to KelpDAO collateral flows on Aave and Compound. One analysis notes that this became the largest DeFi exploit of 2026 so far and triggered 1315 billion dollars in DeFi TVL outflows.

During the attack, the exploiter supplied tens of thousands of rsETH as collateral on Aave and borrowed large amounts of WETH and wstETH, leaving Aave with around 196 million dollars in bad debt exposure tied to the position. In response, Arbitrums Security Council used its emergency powers to freeze 30,765.67 ETH and moved it to a special address, effectively locking the funds until a DAO vote decides their fate, as detailed in a governance-focused report.

2. What DeFi United Is Proposing

In reaction, Aave Labs, KelpDAO, LayerZero, EtherFi, and Compound formed a coordinated recovery effort branded DeFi United and filed a Constitutional Arbitrum Improvement Proposal asking Arbitrum DAO to release the frozen 30,765.67 ETH to a 2-of-3 Gnosis Safe controlled by representatives of Aave, KelpDAO, and Certora, dedicated to rsETH remediation, according to the same proposal summary. A more detailed breakdown of the process describes a 49-day governance pipeline of forum discussion, optional temperature check, onchain voting, and cross-chain finalization for the ETH to move, as outlined in a governance timeline analysis.

Separately, DeFi United is assembling a larger capital stack to fill the remaining hole. Aave DAO has proposed contributing 25,000 ETH from its treasury, while EtherFi, Lido, and Ethena have pledged about 14,570 ETH and Mantle has offered a credit facility of up to 30,000 ETH, all aimed at restoring roughly 120,015 ETH of collateral in the LayerZero lockbox and covering a remaining gap of about 75,081 ETH, according to a recovery-plan breakdown.

3. Why This Matters For DeFi Users

First, this is a live test of whether DeFi governance can effectively coordinate large-scale restitution after a major exploit. Aaves bad debt and rsETH users losses hinge heavily on the DAO-level decision to unlock or retain the 30,765 ETH, and on how well DeFi United executes its recovery plan.

Second, Arbitrums emergency freeze shows that L2 governance can intervene directly in bridge contracts during an exploit. That raises questions about decentralization versus safety, and how predictable these interventions are for users and protocols that build on such infrastructure.

Third, the hack reinforces that cross-chain bridges and liquid restaking derivatives are critical risk points. With prediction markets and analysts already treating another 100 million dollar plus hack this year as nearly certain, bridge and restaking exposure is a key risk vector for anyone using multi-chain DeFi.

Conclusion

DeFi Uniteds push to unlock frozen ETH on Arbitrum is both a rescue mission for rsETH and Aave users and a referendum on how far L2 governance should go in freezing and reallocating suspect funds. The eventual decision and recovery effectiveness will shape expectations for user protection, bridge design, and governance powers across DeFi in future crises.