DeFi lending giant Aave experienced a rare, high-impact liquidation event on March 10, resulting in $27 million worth of borrower positions being forcibly closed. The catalyst was not a sudden market crash, but a specific configuration error within the protocol’s CAPO risk oracle, which incorrectly valued staked Ether (wstETH) collateral, triggering automated sell-offs for unsuspecting users.
What exactly happened to Aave’s oracle system?
Oracles act as the bridge between real-world market prices and smart contract logic. In this instance, the CAPO risk oracle—designed to limit the speed at which yield-bearing token values can increase—suffered from a parameter mismatch. According to Chaos Labs, the system relied on stale data stored in a smart contract, specifically a reference exchange rate and its associated timestamp that were not updated in sync.
Because the system failed to update these values correctly, the oracle calculated a maximum allowed exchange rate for wstETH that was roughly 2.85% lower than the actual market value. When the protocol perceived this artificial price drop, it flagged collateralized positions as under-collateralized, automatically triggering liquidations.
Was the wstETH token itself compromised?
No. The issue was strictly limited to the oracle’s reporting mechanism. A Lido contributor confirmed that the underlying wstETH token and the Lido protocol continued to function as intended throughout the incident. The discrepancy was purely a technical failure in how Aave interpreted the price of the asset relative to ETH. While the broader market valued wstETH at approximately 1.23 ETH, Aave’s malformed oracle feed pegged it at roughly 1.19 ETH.
What was the financial impact on Aave users?
The protocol itself did not incur bad debt, but the impact on individual borrowers was significant. Liquidators—bots and sophisticated traders who monitor for these opportunities—capitalized on the mispricing, walking away with approximately 499 ETH in liquidation bonuses and profits.
This event highlights the fragility of automated risk management in decentralized finance. Similar to how Ether Funding Rates Turn Negative as Institutional Outflows Hit $225M, market participants are increasingly wary of how technical glitches can amplify volatility. Furthermore, as Cardano Price Risks 80% Plunge as Analyst Questions Network Utility reminds us, technical debt and oracle reliability remain the primary attack vectors for modern DeFi protocols.