Aave Oracle Failure: $26M Liquidated – What Happened?

Aave, a leading decentralized finance (DeFi) protocol, recently experienced a significant security incident resulting in the liquidation of approximately $26-$27 million in positions due to a faulty oracle. This event underscores the critical dependence of DeFi protocols on oracles and the potential dangers of configuration errors. This article details everything you need to know about the cause of the failure, its consequences, and the measures taken by Aave.

What Was the Root Cause of the Issue?

The source of the error lay in the configuration of the Correlated Asset Price Oracle (CAPO). CAPO is an oracle that tracks the price of correlated assets (e.g., staked Ethereum). The system temporarily undervalued the price of staked Ethereum (stETH), which served as a key collateral asset within the Aave protocol. This undervaluation led the system to incorrectly assess users’ collateralization ratios, triggering an automatic wave of liquidations.

Liquidations occur when a user’s collateralization ratio falls below a critical level. The collateralization ratio is the ratio of the value of the collateral deposited by a user to the value of the borrowed assets. If the collateralization ratio is too low, the system automatically liquidates the user’s position to minimize losses for the protocol. Due to the inaccurate oracle, user collateralization ratios dropped suddenly and incorrectly, leading to the liquidations.

Which Assets Were Affected?

The most affected asset was stETH, the staked Ethereum token offered by Lido Finance. stETH represents Ethereum deposited by users into the Ethereum blockchain and includes rewards earned from staking. The error temporarily undervalued the price of stETH, leading to the liquidation of users who used stETH as collateral. The liquidations didn’t only affect stETH, but also other collateral assets, as users often utilize multiple assets as collateral.

How Did Aave Respond?

The Aave team responded swiftly to the incident. The first step was to disable the faulty oracle to prevent further liquidations. They then began investigating the root cause of the error and developing a solution. Aave announced that they were working on compensating users for the price errors. The method and timeline for compensation are still being finalized, but Aave is committed to minimizing the damage to users.

What Lessons Can Be Learned for the Future?

The current incident highlights the critical dependence of DeFi protocols on oracles. Oracles play a key role in the DeFi ecosystem, as protocols use real market prices to determine collateralization ratios, interest rates, and other important parameters. If an oracle is faulty or manipulated, it can have serious consequences for users and the protocol.

In the future, DeFi protocols need to place greater emphasis on the security and reliability of oracles. This may include using multiple oracles, sophisticated validation mechanisms, and regular audits. It’s also important for users to be aware of the risks associated with oracles and how DeFi protocols function. Continuous development of blockchain technology and stricter security measures are essential for the long-term sustainability of the DeFi ecosystem.

DeFi and Institutional Capital

While security incidents can raise concerns, the DeFi ecosystem continues to attract institutional capital. DeFi protocols offer new opportunities for investors, such as yield farming and liquidity mining. Compared to traditional financial systems, DeFi protocols provide greater transparency, efficiency, and accessibility. An article in Coindesk points out that DeFi is working to rebuild the fixed-income stack for institutional capital, which could lead to significant growth in the long term.

Conclusion

The recent Aave incident is a serious warning for the DeFi ecosystem. The faulty oracle caused $26 million in liquidations and highlighted the protocols’ dependence on oracles. The Aave team responded quickly to the incident and is working to compensate users. In the future, DeFi protocols need to place greater emphasis on the security and reliability of oracles to minimize the risk of similar incidents. The DeFi ecosystem continues to attract institutional capital, and technological advancements promise significant growth in the long term.

Sources

• What Happened in the Aave Oracle Incident? $26M Liquidations Explained – Defi Bitcoin News – 2024. március 22.
• How DeFi is quietly rebuilding the fixed-income stack for institutional capital – 2026. március 21.