Feature or Flaw? Aave Left With $1.7M in Bad Debt

Aave may have avoided a crisis for now, but changes to the protocol may be necessary to prevent a similar exploit




An unidentified trader, believed to be Mango Markets exploiter Avraham Eisenberg, accumulated a roughly 92 million token loan of CRV, the native token of Curve Finance, over a period of six days. But rather than pay back the loan, the trader allowed a total of about $63.6 million in USDC collateral to be liquidated, Tuesday.

Assets on Aave each have a liquidation threshold — a percentage at which a loan will be considered undercollateralized if reached. 

In this latest case, the liquidation threshold for USDC was 88%, which meant that once the value of the borrowed CRV rose above 88% of the USDC collateral supplied to Aave, liquidators stepped in to sell the USDC, buy back CRV and close the debt position.

But there was a problem: There wasn’t enough CRV liquidity to allow that to happen expeditiously. Instead, the position was closed over the course of 50 minutes through 385 individual mini-liquidation transactions.

This left Aave with 2.64 million CRV, roughly $1.7 million, in bad debt — borrowed CRV that will never be repaid. 

An Aave team member said that this deficit can be covered with the protocol’s treasury holdings. 

Loading Tweet..

Aave’s native token (AAVE) dipped to roughly $50 as the protocol began to accrue bad debt, but has since fully recovered, trading at almost $56 at the time of writing, according to data compiled by Blockworks.

This latest exploit, however, poses a big question for Aave, Matt Fiebach, a Blockworks research analyst, said.

“The scary part about the situation is not that Aave took a hit for $1-$2 million in bad debt but rather the same design flaw is exploitable with other tokens,” Fiebach said.

Blockworks asked Eisenberg if, in his view, Aave was vulnerable to a similar attack, to which he responded, “I do not view this as an attack on either side.”

Eisenberg declined to comment further on his role in the trades, if any, except to note, “it’s a matter of public record that a founder of Curve had a nine-figure, leveraged-long CRV position on Aave.”

Last week, Eisenberg called Curve a “ponzi,” deriding its CRV-emitting liquidity incentive mechanism. Curve’s founder, Michael Egorov, is known to have a nine-figure CRV stash on deposit in Aave that could become vulnerable if the price of CRV fell sharply.

Although it is uncertain what the next steps for Aave are, the protocol tweeted that the community would be initiating discussion in response to this incident. 

Loading Tweet..

It is possible that the protocol will make changes to its liquidation threshold — as proposed by community contributor monetsupply — as a lower liquidation threshold correlates to less bad debt collected. 

The community could also choose to implement limitations on the number of illiquid coins that can be borrowed on the platform. 

Another option is to curtail rehypothecation.

Unlike some other lending markets such as Fraxlend or Silo, Aave rehypothecates collateral posted by its clients — meaning that it uses tokens posted on its platform and lends them out to others. 

Although this increases capital efficiency — as more tokens can be borrowed — the protocol then faces the risk of not being able to liquidate collateral in the event of a price drop.

The Aave community will likely be implementing short-term action to prevent further exploits. 

“Speed is [essential] on this issue,” community member jarnMod wrote. “Please consider quick and decisive reaction to the problem…If you can’t solve it [outright], at least mitigate this risk or communicate more.”

An Aave spokesperson declined to comment beyond the public tweets on the incident.

This story was updated on Nov. 22, 2022, at 6:15 pm ET.

Macauley Peterson contributed reporting.

Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.


Upcoming Events

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Screenshot 2024-05-23 091855.png


Bitcoin L2s aim to boost scalability while preserving decentralization and security, unlocking a better user experience, and new avenues for Bitcoin-powered innovations. However, no existing Bitcoin L2 leverages the full security of Bitcoin.



As part of the #Breakout2024 plans, Radix has introduced Token Trek


House members ask Gensler to keep a “consistent and equitable approach” with ether ETF proposals after the agency approved spot bitcoin ETFs in January


Using old-world instruments to address crypto user experience challenges goes against what this industry set out to do


And, weeks of a potential crypto ETF decision are no stranger to chaos


The FIT21 Act marks the second crypto-focused piece of legislation to advance in Congress this month


More than half of Solana transactions fail