A 2.85% Minor Deviation, $27 Million in Liquidations: The Full Story of the Aave Price Oracle Incident

marsbitPubblicato 2026-03-17Pubblicato ultima volta 2026-03-17

Introduzione

A brief 2.85% pricing deviation in wstETH collateral on Aave triggered approximately $27 million in liquidations. The incident occurred because Aave's risk oracle module (CAPO) used outdated parameters, temporarily valuing wstETH at around 1.19 ETH instead of its market price of ~1.23 ETH. This made some borrowing positions appear under-collateralized, activating the protocol's automatic liquidation system. While the event highlighted the fragility of DeFi oracle systems and how minor technical misconfigurations can lead to significant financial consequences, no bad debt was incurred by the Aave protocol itself. The core issue was not a failure of the primary price oracle or the wstETH token, but an internal configuration error within Aave's additional risk management layer. The incident underscores the critical importance of reliable oracle infrastructure and precise parameter synchronization in decentralized finance.

Written by: Cointelegraph

Compiled by: AididiaoJP, Foresight News

Key Summary

A brief 2.85% pricing deviation in wstETH collateral triggered approximately $27 million in liquidations on Aave. This event demonstrates that even minor technical issues in automated DeFi lending systems can lead to significant financial impacts.
This wave of liquidations occurred because the Aave system briefly valued wstETH at approximately 1.19 ETH, while its market value was near 1.23 ETH, causing some borrowing positions to be mistakenly judged as undercollateralized.
Price oracles are critical DeFi infrastructure, responsible for transmitting external market data to smart contracts to determine collateral value, assess loan health, and trigger automatic liquidations.
The root cause was not a failure of the price data source, but a misconfiguration of Aave's CAPO risk oracle module. Outdated smart contract parameters within this module set a temporary cap on the token's exchange rate.

DeFi protocols rely on automated logic to handle everything from collateral management to risk assessment. While this mechanism builds a truly open, permissionless financial system, it also means that minor technical problems can quickly escalate, causing severe financial turmoil.

As reported by risk monitoring firm Chaos Labs, the market downturn on March 10, 2026, triggered approximately $27 million in borrower position liquidations on Aave, clearly demonstrating this fragility. Within 24 hours, user positions worth about $27 million were liquidated. Surprisingly, this event was not caused by a large-scale market sell-off but by a brief 2.85% price deviation in wrapped staked ETH (wstETH) collateral.

This event is a powerful reminder that the reliability of price oracles and a robust risk management framework are crucial for maintaining the stability of the DeFi ecosystem.

This article explains how a 2.85% pricing deviation in wstETH collateral triggered approximately $27 million in liquidations on the Aave lending protocol. It focuses on analyzing how oracle configuration, smart contract parameters, and automatic liquidation mechanisms amplified a minor pricing error in the DeFi market.

The Sudden Surge in Liquidations

When a wave of liquidations appeared on the Aave market, Chaos Labs, which closely monitors abnormal activity on lending protocols, quickly identified and reported the situation. Initially, market observers speculated that a price oracle failure might have caused the mispricing of collateral assets on the platform.

Price oracles play a key bridging role, providing external market prices for on-chain applications. In lending protocols like Aave, this price data directly determines whether a borrower's collateral is sufficient to cover their loan. Once the collateral value falls below the required safety threshold, the system automatically liquidates the position.

The core asset in this event was wstETH, a token widely used as collateral in the DeFi lending ecosystem.

Liquidation speeds on lending protocols like Aave are typically much faster than traditional margin calls. Because DeFi markets operate 24/7 through automated smart contracts, once the collateral ratio falls below the specified threshold, positions can be liquidated within seconds.

What is wstETH?

wstETH (wrapped staked Ether) is a token issued by the liquid staking protocol Lido.

When users stake Ether through Lido, they first receive stETH, a token representing their staked ETH principal and accumulated staking rewards. To enhance compatibility with various DeFi applications, stETH can be "wrapped" into wstETH.

Due to the continuous accumulation of staking rewards, the value of 1 wstETH is typically slightly higher than 1 ETH. This characteristic makes it an attractive and widely adopted type of collateral in the DeFi lending market.

The Pricing Deviation Event

During this liquidation wave, a deviation emerged between the actual market value of wstETH and the valuation used by Aave's risk system. Aave's algorithm priced wstETH at approximately 1.19 ETH, while the broader market valuation at the time was around 1.23 ETH.

The valuation difference of about 2.85% made positions collateralized with wstETH appear more undercollateralized than they actually were.

Consequently, some borrowing positions fell below the required safety threshold, triggering Aave's automatic liquidation process.

Why Price Oracles are Crucial in DeFi

Price oracles are the underlying infrastructure of DeFi. Because blockchains themselves cannot access real-world market data, they must rely on oracle services to provide external price information for assets. This price data directly impacts:

Valuation of collateral
Health of borrowing positions
Decision-making basis for triggering liquidations

Once a reported drop in collateral price occurs, the protocol may judge the loan as undercollateralized and automatically liquidate the relevant position.

Because this mechanism is entirely algorithm-driven, even minor pricing deviations can trigger serious chain reactions.

In the DeFi space, minor price deviations can also have huge impacts. Brief fluctuations in oracle prices or market prices, even by just a few percentage points, can trigger cascading liquidations. This risk is particularly pronounced when a large number of borrowers use highly leveraged positions collateralized by volatile cryptocurrencies.

The Real Cause: CAPO Risk Oracle Misconfiguration

In-depth investigation confirmed that Aave's main price oracle was functioning normally.

The problem actually lay in the "Correlated Asset Price Oracle" (CAPO) risk module, an additional protection layer for specific assets.

The primary function of CAPO is to set a rate cap on the value increase of yield-bearing tokens like wstETH, aiming to guard against sudden price spikes or potential oracle attack risks.

However, in this event, inconsistent configuration within the CAPO module led to the problem.

Technical Analysis of the Error

Chaos Labs disclosed that the problem stemmed from outdated parameters stored in the smart contract.

Two key parameters failed to update synchronously:

Reference exchange rate
Timestamp associated with that rate

Because these two parameters were not refreshed in sync, the CAPO calculated an allowed exchange rate cap that was temporarily lower than the actual market rate at the time.

This caused the protocol to value wstETH approximately 2.85% lower than the market price.

Aave relies on price oracles, which are data sources that provide real-time asset prices to smart contracts. If these data sources briefly reflect anomalous market prices from exchanges, the protocol automatically recalculates collateral values and may trigger liquidations.

The Chain Reaction of Liquidations

Once the collateral ratio fell below the safety threshold, Aave's automatic liquidation engine immediately activated.

Liquidators (typically high-speed trading bots) quickly stepped in, repaying part of the borrower's debt in exchange for the corresponding collateral at a predetermined discount.

In this event, a total of approximately $27 million in borrowing positions were liquidated.

Liquidators exploited this brief price misalignment, collectively profiting about 499 ETH (including liquidation bonuses).

No Bad Debt Incurred by the Protocol

Despite the large scale of liquidations, the Aave protocol itself did not incur any bad debt. Aave founder Stani Kulechov stated, "No impact on the Aave protocol."

Chaos Labs pointed out that once positions breached the safety threshold, the platform's core risk control and liquidation mechanisms all operated as designed. Therefore, the impact of this event was limited to the relevant borrowers and did not threaten the overall solvency and stability of the Aave protocol. It was the brief, artificial depression of the collateral value that caused some borrowing positions to fall below the liquidation line.

The Aave governance layer subsequently proposed compensating affected users by utilizing recovered funds and the Decentralized Autonomous Organization (DAO) treasury. This approach reflects a new trend in DeFi governance: protocols are beginning to view such technical events as systemic infrastructure risks and tend to compensate受损 users rather than having them bear the full loss.

Another Warning on DeFi Oracle Risks

This event highlights that oracle mechanism design is both one of the most critical links in DeFi infrastructure and one of its most vulnerable weak points.

When automated mechanisms manage tens of billions of dollars in collateral value, even minor configuration errors can trigger consequences far exceeding expectations.

Similar events have occurred on other DeFi platforms. For example, one platform once briefly valued Coinbase's wrapped staked ETH (cbETH) at approximately $1 (actual value ~$2200) due to an oracle configuration error, causing widespread chaos.

These cases all indicate that maintaining reliable, accurate price data sources remains an ongoing challenge in decentralized financial systems.

wstETH and Lido Itself Are Not Responsible

Contributors related to the Lido ecosystem clearly stated that these liquidations were not caused by any failure or defect in the wstETH token itself.

The token functioned normally throughout the event, and the underlying Lido staking protocol remained fully available and unaffected.

The core of the problem lay in how the Aave lending protocol, through its own risk management configuration, processed and interpreted the price data, which deviated.

Implications for the Development of DeFi

As decentralized finance continues to develop, protocols are deploying increasingly sophisticated risk management systems to accommodate yield-bearing assets like wstETH.

These assets present unique pricing challenges because their value continuously grows with the accumulation of staking rewards.

Therefore, effective risk models must properly handle the following elements:

Dynamically changing exchange rates
Continuously accumulating staking rewards
Time-dependent parameter updates
Precise synchronization of various smart contract parameters

Even minor inconsistencies between these elements can escalate into large-scale liquidation events.

Domande pertinenti

QWhat was the primary cause of the $27 million liquidation event on Aave, and what specific asset was involved?

AThe primary cause was a 2.85% pricing discrepancy in the wstETH (wrapped staked ETH) collateral valuation. Aave's risk oracle module, CAPO, temporarily valued wstETH at approximately 1.19 ETH, while its actual market value was around 1.23 ETH. This mispricing caused some borrowing positions to be incorrectly flagged as under-collateralized and subsequently liquidated.

QWhat is the role of a price oracle in a DeFi lending protocol like Aave?

AA price oracle is critical infrastructure that provides external market data to on-chain applications. In lending protocols, these price feeds are used to determine the value of collateral, assess the health of loans, and trigger automatic liquidations if the collateral value falls below a required safety threshold.

QWhat specific technical failure within Aave's system led to the wstETH mispricing, and what module was responsible?

AThe failure was not in the main price oracle but in the CAPO (Correlated Asset Price Oracle) risk module. The issue was caused by outdated smart contract parameters—specifically, a reference exchange rate and its associated timestamp that were not updated in sync. This configuration error caused the CAPO module to calculate a temporary cap on the wstETH exchange rate that was lower than the actual market rate.

QDespite the large-scale liquidations, what was the impact on the Aave protocol's financial health?

AThe Aave protocol itself did not incur any bad debt from this event. The core risk management and liquidation mechanisms functioned as designed once positions were deemed under-collateralized. The financial impact was limited to the affected borrowers, and the overall solvency and stability of the Aave protocol were not threatened.

QWhat does this incident reveal about the broader challenges and future development of DeFi?

AThe incident highlights that oracle reliability and robust risk management frameworks are paramount in DeFi. It demonstrates that even minor technical misconfigurations can be amplified by automated systems, leading to significant financial consequences. For future development, it underscores the need for sophisticated risk models that can accurately handle dynamic exchange rates, staking rewards, time-dependent parameter updates, and precise synchronization of all smart contract parameters, especially for yield-bearing assets like wstETH.

Letture associate

Near Returns to the AI Stage: Transformation into a Public Chain Due to 'Payroll Difficulties,' Agent and Privacy Emerge as New Growth Narratives

NEAR Returns to AI Origins: From Payroll Struggles to Blockchain, Now Focusing on AI Agents and Privacy NEAR Protocol's journey began not with grand blockchain ambitions, but from a practical hurdle: its AI startup founders, including Transformer paper co-author Illia Polosukhin, couldn't efficiently pay international developers in 2017. This led them to pivot and build a high-performance, scalable blockchain. After years navigating various crypto narratives like sharding and cross-chain interoperability, NEAR is now leveraging its AI roots to re-enter the AI arena. A key driver is its "NEAR Intents" layer, which abstracts complex cross-chain transactions. Users simply state their goal (e.g., swap BTC for ETH), and a solver network finds the optimal route. This system has processed over $20B in cross-chain volume, generating significant fee revenue. A major growth area is private transactions via "Confidential Intents/Swaps," which hide trade details until settlement to protect against MEV and front-running. Remarkably, private swaps recently accounted for over 40% of NEAR's transaction volume, highlighting strong demand but also potential regulatory scrutiny. With its AI-founder pedigree, NEAR is positioning itself at the intersection of blockchain, AI agents, and privacy, aiming to become infrastructure for the emerging agent economy while navigating the challenges of its rapid adoption.

marsbit46 min fa

Near Returns to the AI Stage: Transformation into a Public Chain Due to 'Payroll Difficulties,' Agent and Privacy Emerge as New Growth Narratives

marsbit46 min fa

From Ethereum to AI's 'CROPS': What Exactly is This Set of 'Slow Variables' That Vitalik Repeatedly Emphasizes?

In recent discussions, Vitalik Buterin has frequently emphasized the concept of "CROPS," a framework defining core values for Ethereum's development. CROPS stands for Censorship Resistance, Capture Resistance, Open Source, Privacy, and Security. Initially outlined in the Ethereum Foundation's "EF Mandate," it represents a commitment to user sovereignty, ensuring that the network resists external control, remains open, protects privacy, and prioritizes security. The relevance of CROPS extends beyond Ethereum's foundational principles, becoming crucial in the context of AI integration. As AI agents begin handling wallet operations and automated transactions, the risk increases that users may cede control over their digital assets, privacy, and intentions to centralized AI service providers. A "CROPS AI" would therefore emphasize local execution where possible, privacy-preserving remote model calls (e.g., using zero-knowledge proofs), and transparent, verifiable processes to maintain user agency. Vitalik highlights a significant convergence between "CROPS Ethereum access layer" and "CROPS AI." Both address the same fundamental challenge: how users can access powerful services—be it blockchain data via RPCs or AI models—without exposing sensitive information or relinquishing ultimate control. This intersection points toward a future digital entry point that is more private, secure, and user-controlled. Ultimately, CROPS is not merely an abstract ideal but a practical guidepost. It steers development—from protocol resilience and wallet design to AI agent safety—towards a future where users retain self-sovereignty even as digital systems grow more complex and powerful. In an era of accelerating AI adoption, these "slow variables" of censorship resistance, openness, privacy, and security may define Ethereum's enduring value.

marsbit57 min fa

From Ethereum to AI's 'CROPS': What Exactly is This Set of 'Slow Variables' That Vitalik Repeatedly Emphasizes?

marsbit57 min fa

Zcash Bug Could Have Minted Unlimited ZEC Undetected

A critical vulnerability in Zcash's Orchard shielded pool, discovered by researcher Taylor Hornby on May 29, 2026, could have allowed an attacker to create an unlimited amount of undetectable counterfeit ZEC. The flaw, involving an under-constrained element in the Orchard circuit, existed from the pool's 2022 activation until an emergency fix was deployed by June 2, 2026. Hornby identified the bug using AI-assisted auditing tools and confirmed its exploitability in a test environment. Due to Orchard's privacy features, which hide transaction amounts and history, there is no cryptographic way to prove whether the vulnerability was exploited before the fix. While Shielded Labs assesses prior exploitation as unlikely, this uncertainty has sparked a debate on proving supply integrity in privacy-preserving systems. In response, Shielded Labs and other developers are exploring a network upgrade, potentially involving a new shielded pool and formal verification of the circuit rules to prevent future vulnerabilities and allow verification of the ZEC supply's integrity. ZEC's price fell nearly 45% following the disclosure.

bitcoinist1 h fa

Zcash Bug Could Have Minted Unlimited ZEC Undetected

bitcoinist1 h fa

Silicon Valley 'Startup Guru' Steve Hoffman: Web3 + AI Could Be a Trap

Silicon Valley investor and "Godfather of Startups" Steve Hoffman warns that combining Web3 with AI is likely a trap, not a promising venture. In an interview, Hoffman argues that while AI is a foundational technology touching all industries, Web3 adds complexity, friction, and regulatory risk without solving mainstream consumer or business needs. He advises founders to focus on deep, specialized applications where startups can out-iterate giants, rather than on generic features easily replicated by large tech companies. Hoffman observes that Silicon Valley will lead foundational AI research, while China excels at rapid, large-scale application and commercialization, particularly in robotics. He stresses that AI-driven autonomous agents capable of collaborative, multi-step tasks are 2-4 years away, which will cause significant job displacement. The solution is not to slow AI but to redesign business models around human-AI collaboration and reform social systems like education and retraining. For startups, Hoffman recommends focusing on vertical, expertise-heavy domains to build defensibility. He sees major opportunities in AI fraud detection and cybersecurity. Key founder mindsets include systemic thinking over feature-focus, relentless customer centricity, building adaptive teams, and deeply understanding AI's capabilities and limits. Hoffman is also leading a non-profit initiative to establish university centers aimed at training future leaders in responsible, human-value-aligned AI innovation.

marsbit2 h fa

Silicon Valley 'Startup Guru' Steve Hoffman: Web3 + AI Could Be a Trap

marsbit2 h fa

Token Inefficient, Economy Tokenless

The article "Tokens Aren't Economical, Economics Aren't Tokenized" analyzes a pivotal shift in the AI industry from a technology-driven narrative to one dominated by capital efficiency. It highlights two concurrent trends: a severe capital shortage due to the exorbitant and recurring costs of compute (e.g., OpenAI's high burn rate) and a wave of corporate spin-offs where major tech companies are separating their AI units (like Kuaishou's Kling and Baidu's Kunlunxin). The core argument is that AI's "anti-internet" business model, where user growth increases costs rather than profits, has created a disconnect between high valuations and actual cash flow. Spin-offs address this by allowing AI assets to be valued independently. Within a parent company, they are seen as cost centers, but as standalone entities, they are priced based on their growth potential and scarcity in the primary market, leading to massive valuation premiums (e.g., Kling's estimated value tripling post-spin-off). The industry is at an inflection point, moving from "model worship" to "value realization." The competition is evolving from a pure compute (GPU) race to a broader focus on systemic efficiency and full-stack engineering (involving CPUs and orchestration) to achieve viable commercialization. The year 2026 is framed as a critical moment where the industry must definitively answer how to economically translate AI capability into tangible business value, reshaping the sector's future power structure.

marsbit2 h fa

marsbit2 h fa

Trading

Spot

Futures