•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
DeFi governance demonstrated an emergency recovery capability after the April 2026 KelpDAO exploit. Approximately 116,500 rsETH, valued at about $292 million, were stolen and then deployed as collateral on Compound v3. exchange rates today
Standard liquidation rules did not provide a recovery path because the stolen rsETH continued to price normally. A governance-approved oracle adjustment changed that outcome, eventually enabling DeFi United to seize roughly $30 million in collateral. The recovery was described as one of the most coordinated on-chain interventions in DeFi history.
On April 18, 2026, attackers exploited a vulnerability in KelpDAO’s LayerZero bridge infrastructure. About 116,500 rsETH worth $292 million were released illegitimately from the Ethereum-side escrow.
The attack was widely attributed to North Korea’s Lazarus Group. Instead of selling the assets, the attacker deployed the stolen rsETH as collateral across multiple lending protocols.
On-chain data indicates the attacker opened a Compound v3 position within minutes of the exploit. The position involved borrowing ETH and wstETH in tranches against the stolen rsETH tokens. Partial withdrawals were also used to manage the collateral ratio during the same window, leaving the position active and borrowing real assets before the protocol could respond.
In the weeks that followed, the position remained technically healthy at market prices. Compound froze the rsETH markets and set loan-to-value ratios to zero. However, the stolen rsETH still priced normally despite lacking legitimate backing, leaving automated liquidation mechanisms without a trigger.
There was no admin key or circuit breaker available to freeze the account, making governance the only available instrument to act.
The Compound Foundation engaged risk partners, including Gauntlet, to identify a resolution pathway. Gauntlet submitted a proposal for a modified oracle for Compound’s rsETH markets.
The new oracle kept the Kelp DAO exchange rate feed as its primary source, and added configurable price bounds operable by the Compound multisig.
Santiment Intelligence reported that the oracle adjustment pushed the attacker’s position into liquidation. This enabled DeFi United to seize roughly $30 million in collateral.
The mechanism temporarily set a price floor below market value, which triggered undercollateralization. A DeFi United Recovery Guardian multisig then repaid the borrowed assets and seized the collateral.
Santiment data recorded $29,044,839 in Compound v3 liquidations on May 9 at 02:30 UTC. The event covered 12,426.70 rsETH at a price of $2,337.29 per token.
rsETH showed no meaningful price distress during the event, and the collateral was removed cleanly without triggering a broader market selloff.
The seized collateral was redeemed through KelpDAO’s system and converted back to ETH. Those funds helped refill the damaged bridge lockbox that backed rsETH.
After the process was completed, the oracle was restored to normal market levels, and no persistent changes were made to the Compound protocol.
Premium gym chains are entering a “golden era” that is ending or already in decline, as rising operating costs collide with shifting consumer preferences toward more flexible, community-based ways to exercise. Long-term memberships are shrinking, margins are pressured by higher rents and facility expenses, and competition from smaller, more personalized…
