Aave liquidation error, a significant incident on the Aave decentralized finance (DeFi) lending protocol, resulted in approximately $26.9 million to $27 million in erroneous liquidations on March 10, 2026. This substantial event was directly attributed to a configuration issue within Aave’s Correlated Asset Price Oracle (CAPO), an external risk management tool provided by Chaos Labs.
The incident saw around 34 user accounts affected, leading to the liquidation of approximately 10,938 wrapped staked ETH (wstETH). Third-party liquidator bots capitalized on the situation, profiting an estimated 499 ETH, equivalent to about $1.27 million, by closing these affected positions. Crucially, Chaos Labs, through its Founder and CEO Omer Goldberg, swiftly confirmed that all impacted users would be fully reimbursed, demonstrating a commitment to rectifying the error.
Understanding the Oracle Misconfiguration
The erroneous liquidations were triggered by a precise misconfiguration in the CAPO oracle, causing it to temporarily undervalue wstETH by approximately 2.85% compared to its actual market exchange rate. This seemingly minor undervaluation had a cascading effect, pushing specific borrowing positions below their required “health factor”—the critical collateral-to-loan ratio—thereby initiating automatic liquidations across the Aave V3 Ethereum Core and Prime instances.
The root cause of this misconfiguration was an inconsistency in update constraints at the smart contract level. Specifically, the `snapshotRatio` parameter, which is designed with a 3% increase limit every three days, could not be updated to its target value in a single transaction. Concurrently, the `snapshotTimestamp` successfully updated to a timestamp from seven days prior. This critical misalignment resulted in the CAPO-calculated exchange rate ceiling (around 1.1939) being significantly lower than the actual market rate (approximately 1.228), directly leading to the Aave liquidation error.
The Role of Chaos Labs and Aave’s Response
Chaos Labs functions as a crucial risk management partner for Aave, tasked with conducting simulations and stress-testing protocol parameters to bolster economic security. Following the incident, Chaos Labs and BGD Labs acted decisively, immediately reducing the wstETH borrowing cap for affected instances to 1 and manually aligning parameters via Risk Steward to restore the correct exchange rate. This swift action mitigated further potential damage and stabilized the protocol.
“There was no impact on the Aave Protocol itself, and the liquidations affected positions already close to their liquidation thresholds,” stated Aave founder and CEO Stani Kulechov, underscoring that the core protocol’s integrity remained intact despite the external oracle issue.
Despite the substantial monetary figures involved, no bad debt was incurred by the Aave protocol itself. The commitment to full reimbursement for affected users is being honored, with 141.5 ETH already recovered through BuilderNet, and up to 345 ETH allocated from the Aave DAO treasury to cover the remaining compensation. This robust response highlights the resilience and user-centric approach within the DeFi ecosystem, even when faced with technical challenges.
Aave Liquidation Error: Lessons for DeFi Risk Management
This event, while costly for the directly affected users, serves as a profound case study in the complexities of oracle configurations and risk management within decentralized finance. The Aave liquidation error was not a flaw in Aave’s core oracle infrastructure but rather an on-chain configuration misalignment. It underscores the critical importance of meticulous parameter synchronization and robust update mechanisms for external tools that dictate the financial health of DeFi protocols. As the DeFi landscape continues to evolve, such incidents provide invaluable lessons for enhancing security, transparency, and user protection against unforeseen technical glitches.
The incident on March 10, 2026, reinforces the ongoing need for rigorous testing and agile responses to maintain trust and stability in the burgeoning world of decentralized finance. For more on similar incidents, explore our related Fraudulents news.
