A 2.85% Minor Deviation, $27 Million in Liquidations: The Full Story of the Aave Price Oracle Incident

marsbitPublicado a 2026-03-17Actualizado a 2026-03-17

Resumen

A brief 2.85% pricing deviation in wstETH collateral on Aave triggered approximately $27 million in liquidations. The incident occurred because Aave's risk oracle module (CAPO) used outdated parameters, temporarily valuing wstETH at around 1.19 ETH instead of its market price of ~1.23 ETH. This made some borrowing positions appear under-collateralized, activating the protocol's automatic liquidation system. While the event highlighted the fragility of DeFi oracle systems and how minor technical misconfigurations can lead to significant financial consequences, no bad debt was incurred by the Aave protocol itself. The core issue was not a failure of the primary price oracle or the wstETH token, but an internal configuration error within Aave's additional risk management layer. The incident underscores the critical importance of reliable oracle infrastructure and precise parameter synchronization in decentralized finance.

Written by: Cointelegraph

Compiled by: AididiaoJP, Foresight News

Key Summary

  • A brief 2.85% pricing deviation in wstETH collateral triggered approximately $27 million in liquidations on Aave. This event demonstrates that even minor technical issues in automated DeFi lending systems can lead to significant financial impacts.
  • This wave of liquidations occurred because the Aave system briefly valued wstETH at approximately 1.19 ETH, while its market value was near 1.23 ETH, causing some borrowing positions to be mistakenly judged as undercollateralized.
  • Price oracles are critical DeFi infrastructure, responsible for transmitting external market data to smart contracts to determine collateral value, assess loan health, and trigger automatic liquidations.
  • The root cause was not a failure of the price data source, but a misconfiguration of Aave's CAPO risk oracle module. Outdated smart contract parameters within this module set a temporary cap on the token's exchange rate.

DeFi protocols rely on automated logic to handle everything from collateral management to risk assessment. While this mechanism builds a truly open, permissionless financial system, it also means that minor technical problems can quickly escalate, causing severe financial turmoil.

As reported by risk monitoring firm Chaos Labs, the market downturn on March 10, 2026, triggered approximately $27 million in borrower position liquidations on Aave, clearly demonstrating this fragility. Within 24 hours, user positions worth about $27 million were liquidated. Surprisingly, this event was not caused by a large-scale market sell-off but by a brief 2.85% price deviation in wrapped staked ETH (wstETH) collateral.

This event is a powerful reminder that the reliability of price oracles and a robust risk management framework are crucial for maintaining the stability of the DeFi ecosystem.

This article explains how a 2.85% pricing deviation in wstETH collateral triggered approximately $27 million in liquidations on the Aave lending protocol. It focuses on analyzing how oracle configuration, smart contract parameters, and automatic liquidation mechanisms amplified a minor pricing error in the DeFi market.

The Sudden Surge in Liquidations

When a wave of liquidations appeared on the Aave market, Chaos Labs, which closely monitors abnormal activity on lending protocols, quickly identified and reported the situation. Initially, market observers speculated that a price oracle failure might have caused the mispricing of collateral assets on the platform.

Price oracles play a key bridging role, providing external market prices for on-chain applications. In lending protocols like Aave, this price data directly determines whether a borrower's collateral is sufficient to cover their loan. Once the collateral value falls below the required safety threshold, the system automatically liquidates the position.

The core asset in this event was wstETH, a token widely used as collateral in the DeFi lending ecosystem.

Liquidation speeds on lending protocols like Aave are typically much faster than traditional margin calls. Because DeFi markets operate 24/7 through automated smart contracts, once the collateral ratio falls below the specified threshold, positions can be liquidated within seconds.

What is wstETH?

wstETH (wrapped staked Ether) is a token issued by the liquid staking protocol Lido.

When users stake Ether through Lido, they first receive stETH, a token representing their staked ETH principal and accumulated staking rewards. To enhance compatibility with various DeFi applications, stETH can be "wrapped" into wstETH.

Due to the continuous accumulation of staking rewards, the value of 1 wstETH is typically slightly higher than 1 ETH. This characteristic makes it an attractive and widely adopted type of collateral in the DeFi lending market.

The Pricing Deviation Event

During this liquidation wave, a deviation emerged between the actual market value of wstETH and the valuation used by Aave's risk system. Aave's algorithm priced wstETH at approximately 1.19 ETH, while the broader market valuation at the time was around 1.23 ETH.

The valuation difference of about 2.85% made positions collateralized with wstETH appear more undercollateralized than they actually were.

Consequently, some borrowing positions fell below the required safety threshold, triggering Aave's automatic liquidation process.

Why Price Oracles are Crucial in DeFi

Price oracles are the underlying infrastructure of DeFi. Because blockchains themselves cannot access real-world market data, they must rely on oracle services to provide external price information for assets. This price data directly impacts:

  • Valuation of collateral
  • Health of borrowing positions
  • Decision-making basis for triggering liquidations

Once a reported drop in collateral price occurs, the protocol may judge the loan as undercollateralized and automatically liquidate the relevant position.

Because this mechanism is entirely algorithm-driven, even minor pricing deviations can trigger serious chain reactions.

In the DeFi space, minor price deviations can also have huge impacts. Brief fluctuations in oracle prices or market prices, even by just a few percentage points, can trigger cascading liquidations. This risk is particularly pronounced when a large number of borrowers use highly leveraged positions collateralized by volatile cryptocurrencies.

The Real Cause: CAPO Risk Oracle Misconfiguration

In-depth investigation confirmed that Aave's main price oracle was functioning normally.

The problem actually lay in the "Correlated Asset Price Oracle" (CAPO) risk module, an additional protection layer for specific assets.

The primary function of CAPO is to set a rate cap on the value increase of yield-bearing tokens like wstETH, aiming to guard against sudden price spikes or potential oracle attack risks.

However, in this event, inconsistent configuration within the CAPO module led to the problem.

Technical Analysis of the Error

Chaos Labs disclosed that the problem stemmed from outdated parameters stored in the smart contract.

Two key parameters failed to update synchronously:

  • Reference exchange rate
  • Timestamp associated with that rate

Because these two parameters were not refreshed in sync, the CAPO calculated an allowed exchange rate cap that was temporarily lower than the actual market rate at the time.

This caused the protocol to value wstETH approximately 2.85% lower than the market price.

Aave relies on price oracles, which are data sources that provide real-time asset prices to smart contracts. If these data sources briefly reflect anomalous market prices from exchanges, the protocol automatically recalculates collateral values and may trigger liquidations.

The Chain Reaction of Liquidations

Once the collateral ratio fell below the safety threshold, Aave's automatic liquidation engine immediately activated.

Liquidators (typically high-speed trading bots) quickly stepped in, repaying part of the borrower's debt in exchange for the corresponding collateral at a predetermined discount.

In this event, a total of approximately $27 million in borrowing positions were liquidated.

Liquidators exploited this brief price misalignment, collectively profiting about 499 ETH (including liquidation bonuses).

No Bad Debt Incurred by the Protocol

Despite the large scale of liquidations, the Aave protocol itself did not incur any bad debt. Aave founder Stani Kulechov stated, "No impact on the Aave protocol."

Chaos Labs pointed out that once positions breached the safety threshold, the platform's core risk control and liquidation mechanisms all operated as designed. Therefore, the impact of this event was limited to the relevant borrowers and did not threaten the overall solvency and stability of the Aave protocol. It was the brief, artificial depression of the collateral value that caused some borrowing positions to fall below the liquidation line.

The Aave governance layer subsequently proposed compensating affected users by utilizing recovered funds and the Decentralized Autonomous Organization (DAO) treasury. This approach reflects a new trend in DeFi governance: protocols are beginning to view such technical events as systemic infrastructure risks and tend to compensate受损 users rather than having them bear the full loss.

Another Warning on DeFi Oracle Risks

This event highlights that oracle mechanism design is both one of the most critical links in DeFi infrastructure and one of its most vulnerable weak points.

When automated mechanisms manage tens of billions of dollars in collateral value, even minor configuration errors can trigger consequences far exceeding expectations.

Similar events have occurred on other DeFi platforms. For example, one platform once briefly valued Coinbase's wrapped staked ETH (cbETH) at approximately $1 (actual value ~$2200) due to an oracle configuration error, causing widespread chaos.

These cases all indicate that maintaining reliable, accurate price data sources remains an ongoing challenge in decentralized financial systems.

wstETH and Lido Itself Are Not Responsible

Contributors related to the Lido ecosystem clearly stated that these liquidations were not caused by any failure or defect in the wstETH token itself.

The token functioned normally throughout the event, and the underlying Lido staking protocol remained fully available and unaffected.

The core of the problem lay in how the Aave lending protocol, through its own risk management configuration, processed and interpreted the price data, which deviated.

Implications for the Development of DeFi

As decentralized finance continues to develop, protocols are deploying increasingly sophisticated risk management systems to accommodate yield-bearing assets like wstETH.

These assets present unique pricing challenges because their value continuously grows with the accumulation of staking rewards.

Therefore, effective risk models must properly handle the following elements:

  • Dynamically changing exchange rates
  • Continuously accumulating staking rewards
  • Time-dependent parameter updates
  • Precise synchronization of various smart contract parameters

Even minor inconsistencies between these elements can escalate into large-scale liquidation events.

Preguntas relacionadas

QWhat was the primary cause of the $27 million liquidation event on Aave, and what specific asset was involved?

AThe primary cause was a 2.85% pricing discrepancy in the wstETH (wrapped staked ETH) collateral valuation. Aave's risk oracle module, CAPO, temporarily valued wstETH at approximately 1.19 ETH, while its actual market value was around 1.23 ETH. This mispricing caused some borrowing positions to be incorrectly flagged as under-collateralized and subsequently liquidated.

QWhat is the role of a price oracle in a DeFi lending protocol like Aave?

AA price oracle is critical infrastructure that provides external market data to on-chain applications. In lending protocols, these price feeds are used to determine the value of collateral, assess the health of loans, and trigger automatic liquidations if the collateral value falls below a required safety threshold.

QWhat specific technical failure within Aave's system led to the wstETH mispricing, and what module was responsible?

AThe failure was not in the main price oracle but in the CAPO (Correlated Asset Price Oracle) risk module. The issue was caused by outdated smart contract parameters—specifically, a reference exchange rate and its associated timestamp that were not updated in sync. This configuration error caused the CAPO module to calculate a temporary cap on the wstETH exchange rate that was lower than the actual market rate.

QDespite the large-scale liquidations, what was the impact on the Aave protocol's financial health?

AThe Aave protocol itself did not incur any bad debt from this event. The core risk management and liquidation mechanisms functioned as designed once positions were deemed under-collateralized. The financial impact was limited to the affected borrowers, and the overall solvency and stability of the Aave protocol were not threatened.

QWhat does this incident reveal about the broader challenges and future development of DeFi?

AThe incident highlights that oracle reliability and robust risk management frameworks are paramount in DeFi. It demonstrates that even minor technical misconfigurations can be amplified by automated systems, leading to significant financial consequences. For future development, it underscores the need for sophisticated risk models that can accurately handle dynamic exchange rates, staking rewards, time-dependent parameter updates, and precise synchronization of all smart contract parameters, especially for yield-bearing assets like wstETH.

Lecturas Relacionadas

Criptomoneda USCR se estabiliza en 0,0022 $: ¿Puede el memecoin revertir las pérdidas del Q2?

La criptomoneda USCR, un memecoin vinculado a las reservas oficiales de cripto de EE.UU., muestra signos de recuperación tras caer a un mínimo de dos meses en 0,0022 dólares. En mayo, el token subió más del 65%, pero en junio perdió un 37%. Ahora, la estabilización cerca del soporte de mayo podría permitir un rebote técnico hacia 0,0028 dólares o incluso 0,0036 dólares, lo que representa un potencial alcista del 30-60%. El sentimiento de USCR depende en gran medida del progreso de un proyecto de ley para crear una reserva estratégica estadounidense de Bitcoin. Las probabilidades de su aprobación antes de 2027 han caído al 18%, lo que explica la presión bajista reciente. A pesar de esta incertidumbre normativa, la base de poseedores se mantiene sólida, con unos 48.000, una caída mínima desde los 54.000. En resumen, la posible recuperación de USCR depende tanto de un impulso técnico como de noticias positivas sobre la reserva de Bitcoin en EE.UU.

ambcryptoHace 12 min(s)

Criptomoneda USCR se estabiliza en 0,0022 $: ¿Puede el memecoin revertir las pérdidas del Q2?

ambcryptoHace 12 min(s)

Una ‘diosa’ de la caridad con 3 millones de seguidores era todo una IA: la farsa del ‘orfanato falso’ desmonta de la noche a la mañana una beneficencia transnacional

La australiana Lily Jay, una influencer de Instagram con casi 3 millones de seguidores, es investigada por ABC NEWS Verify por una supuesta red de estafa benéfica utilizando contenido generado por IA. A través de su 'Lily Jay Foundation', publicaba videos de proyectos en Uganda, Gaza, Nepal y Sudán, incluyendo la inauguración de un orfanato en Uganda, donde la imagen de ella con niños mostraba anomalías típicas de la IA, como letras mal escritas. Las autoridades de Uganda confirmaron que no existe registro de dicho orfanato. Además, imágenes de un premio humanitario que recibió contenían la marca de agua invisible SynthID de ChatGPT. La investigación revela que la fundación, que operaba desde Kosovo, se define en su sitio web como "no una organización benéfica". Aunque solicitaba donaciones, no figuraba como entidad benéfica registrada en Australia, lo que evita la obligación de transparencia financiera. Tres personas figuran como directores, uno vinculado a una firma de relaciones públicas que promocionó el falso premio. Tras la investigación de ABC, el sitio web eliminó para visitantes australianos los botones de donación y la advertencia sobre su estatus, aunque se mantuvieron activos para el extranjero. Expertos advierten que este caso explota la confianza y el deseo de creer en actos de bondad, marcando un peligroso precedente del uso del 'deepfake' y la IA para defraudar en el sector humanitario.

marsbitHace 31 min(s)

Una ‘diosa’ de la caridad con 3 millones de seguidores era todo una IA: la farsa del ‘orfanato falso’ desmonta de la noche a la mañana una beneficencia transnacional

marsbitHace 31 min(s)

L2 'Recalibrating': Cuando L1 se convierte en su propio Rollup, ¿cuál es el final del camino de Ethereum?

"L2 «recalibración»: cuando L1 se convierte en su propio Rollup, ¿cuál es el final de Ethereum?" La relación entre L1 y L2 en Ethereum está evolucionando. Originalmente, L2 (como los Rollups) se centraban en ofrecer espacio de transacción barato, mientras que L1 priorizaba la descentralización y seguridad. Sin embargo, los avances en Ethereum, como el aumento del límite de Gas y el desarrollo de zkEVM, permiten que L1 también escale significativamente. Esto obliga a repensar el valor de L2, que ya no puede basarse solo en costos bajos, sino que debe ofrecer funciones diferenciadas como privacidad o modelos de gobernanza flexibles. La creciente fragmentación entre múltiples L2 plantea problemas de interoperabilidad y experiencia de usuario. La comunidad está trabajando en soluciones como marcos de intenciones (intents) y una capa de interoperabilidad nativa (EIL) para que Ethereum "vuelva a sentirse como una sola cadena", facilitando las interacciones entre diferentes entornos de ejecución sin que el usuario note la complejidad subyacente. Acortar el tiempo de finalidad de L1 también es crucial para aplicaciones cross-chain. Un concepto provocador sugiere que, con la adopción de sistemas de prueba (zkEVM) en la red principal, Ethereum L1 podría, en un sentido arquitectónico, convertirse en una especie de "Rollup de sí mismo", donde la ejecución y la verificación se separan. Esto, junto con la visión de "Native Rollup", podría difuminar los límites tradicionales entre L1 y L2, transformándolos en un espectro de entornos de ejecución con diferentes funcionalidades pero que comparten seguridad, liquidez y un sistema de estado común. En conclusión, el futuro de Ethereum no es que L1 reemplace a L2 o viceversa. En cambio, el ecosistema podría evolucionar hacia un conjunto unificado de entornos de ejecución especializados que, trabajando en conjunto, ofrezcan escalabilidad, diversidad de funciones y una experiencia de usuario cohesiva. El reto es volver a ensamblar, sin perder los beneficios de la escalabilidad, un Ethereum que funcione como un todo integrado para el usuario final.

marsbitHace 32 min(s)

L2 'Recalibrating': Cuando L1 se convierte en su propio Rollup, ¿cuál es el final del camino de Ethereum?

marsbitHace 32 min(s)

Grayscale Presenta su Primer ETF de Worldcoin ante la SEC Bajo el Ticker GWLD

Grayscale Investments ha presentado ante la SEC de EE.UU. una solicitud para lanzar un ETF de Worldcoin (GWLD), permitiendo a inversores estadounidenses acceder a WLD mediante un producto regulado. El anuncio provocó un aumento del 8% en el precio del token, que actualmente cotiza cerca de su mínimo histórico. El documento también advierte sobre problemas estructurales: el 90% de la oferta circulante está concentrada en las 100 principales direcciones, y habrá desbloqueos continuos de tokens hasta 2028, lo que podría ejercer presión vendedora. Además, el proyecto enfrenta desafíos regulatorios debido a su uso de biometría (escaneo ocular). Aunque la aprobación de la SEC es incierta y la cotización en bolsa no se espera hasta finales de 2026, Grayscale continúa expandiendo su oferta de productos de inversión en criptomonedas regulados.

TheNewsCryptoHace 48 min(s)

Grayscale Presenta su Primer ETF de Worldcoin ante la SEC Bajo el Ticker GWLD

TheNewsCryptoHace 48 min(s)

Fragmentos Eternos del Dinero: Los Pagos de Terceros no tienen una Primera Naturaleza

**Fragmentos eternos del dinero: Los pagos de terceros carecen de una primera naturaleza** El sector de pagos vive una época convulsa, con Stripe intentando adquirir PayPal. Stripe, que alcanzó una valoración de 100.000 millones de dólares durante la pandemia pero no salió a bolsa, busca ahora nuevas narrativas de crecimiento a través de adquisiciones y la expansión hacia las stablecoins y la economía de los agentes. El artículo argumenta que la industria de pagos es inherentemente fragmentada y está subordinada a la banca tradicional, lo que limita el potencial disruptivo de cualquier jugador. Los esfuerzos de Stripe en stablecoins (como OUSD) y su red de pago para agentes (Tempo) son vistos como apuestas de futuro, pero enfrentan el desafío de la adopción real más allá del ámbito cripto. Se destaca que los modelos de negocio basados solo en procesamiento de pagos son limitados. El futuro podría estar en los servicios de valor añadido, especialmente en las redes de liquidación. Empresas como Stripe y Circle, al obtener licencias bancarias, podrían desarrollar sistemas de liquidación más eficientes que capturen parte del valor tradicionalmente retenido por los bancos. En conclusión, Stripe se enfrenta a una guerra de trincheras en un sector fragmentado. Su éxito depende de si puede trascender el simple procesamiento y capitalizar las oportunidades en stablecoins, agentes y, sobre todo, en la infraestructura de liquidación, para escapar de la eterna fragmentación del dinero.

marsbitHace 56 min(s)

Fragmentos Eternos del Dinero: Los Pagos de Terceros no tienen una Primera Naturaleza

marsbitHace 56 min(s)

Trading

Spot
活动图片

Categorías popularesright-arrow

Etiquetas Popularesright-arrow