Aave Restores Collateral After LayerZero V2 Bridge Exploit Involving 116,500 rsETH

Aave published a post-incident report on April 18, 2026 detailing an rsETH-related exploit tied to the LayerZero V2 crosschain bridge moving rsETH from Unichain to Ethereum. Aave said an RPC pollution attack against the verification network led the bridge to accept forged crosschain messages, triggering an abnormal release of 116,500 rsETH on Ethereum. According to the report, the attacker then split the assets across eight positions on Aave V3, borrowing 82,650 WETH and 821 wstETH. In response, Aave said it froze the affected reserves, updated risk parameters, and worked with multiple counterparties on recovery efforts. By May 26, the Ethereum-side adapter had completed five replenishment batches, depositing a total of 116,131.72 rsETH. Aave said this fully restored collateralization and allowed impacted markets to return to normal operations.