Kelp DAO has burned the attacker's rsETH tokens and outlined a recovery plan to refill liquidity through Aave's Recovery Guardian multisig before resuming withdrawals.