Aave Oracle Glitch Triggers $27 Million in Liquidations

Aave is a major decentralized finance, or DeFi, lending protocol that allows users to deposit assets or borrow against collateral. The stress did not stem from a hack of Aave's smart contracts, but from a vulnerability in an external KelpDAO rsETH bridge. The risk spread through links among collateral, lending and liquidity, highlighting the potential for contagion across DeFi protocols.

In April 2026, a hacker stole about $292 million in rsETH from KelpDAO's LayerZero bridge. Aave subsequently faced about $8.45 billion in withdrawals, but its core protocol remained operational and funds were not frozen across the board. Utilization in some markets nevertheless reached 100%, prompting administrators to urgently freeze individual markets and adjust risk parameters.

Aave is a decentralized lending protocol powered by smart contracts, allowing users to deposit assets, earn returns or borrow against collateral without a traditional bank. Cumulative lending volume reflects the platform's long-term demand for capital and depth of liquidity. Passing the trillion-dollar threshold also signals that DeFi is gradually moving beyond crypto-native markets toward becoming mainstream financial infrastructure.

As of July 20, 2026, Aave had formally surpassed $1 trillion in cumulative lending volume, becoming the first DeFi protocol to reach the milestone. CEO Stani Kulechov said the next phase would focus on making Aave the world's most efficient liquidity network and expanding system integrations with banks and Fintech companies.