Sonic Labs and Flying Tulip founder Andre Cronje announced that his team is actively investigating the L0/rsETH incident. According to Foresight News, preliminary reports suggest that the theft of approximately $200 million in rsETH may have been caused by a private key leak or configuration error. The stolen assets were subsequently deposited into Aave to borrow ETH due to insufficient rsETH liquidity.
Cronje noted that the affected positions are technically still collateralized. However, if bad debt occurs, Aave's token mechanism and safety module will serve as the first line of defense to absorb the risk. Aave does not have a mechanism to subsidize user losses, as this could trigger a bank run. Currently, Aave holds around $7 billion in ETH and has a withdrawal capacity of about $100 million, indicating that the overall impact of this incident is limited.
To prioritize user liquidity, Flying Tulip has withdrawn all ETH from Aave into its fund management encapsulation contract. This decision was made because Aave's available liquidity has fallen below its minimum threshold.