Decentralized lending giant Aave has effectively halted operations after its core markets simultaneously reached 100% utilization, rendering users unable to withdraw billions of dollars' worth of cryptocurrency. DeFi expert DeFi Warhold explained that this means all available funds have been depleted, resulting in a liquidity crisis. Approximately $5 billion in stablecoins, including USDT and USDC, are currently locked, with the protocol lacking the necessary liquidity to facilitate payouts.
The crisis unfolded on April 18, following a $292 million exploit of the Kelp DAO rsETH bridge, in which an attacker utilized forged cross-chain messages to mint unbacked rsETH, using it as collateral to borrow nearly $200 million in WETH on Aave. As news of the 'bad debt' spread, a bank-run scenario ensued, with $6.6 billion exiting the protocol within 24 hours. In response to the crisis, Aave founder Stani Kulechov stated, 'I do not have anything useful to say.' DeFi Warhold noted that 100% utilization across all markets is akin to a complete halt, implying no available liquidity for withdrawals and an inability to process liquidations, resulting in $3 billion in USDT and $2 billion in USDC being stuck without a viable exit strategy. The situation is further complicated by the fact that if prices fluctuate, bad debt will compound without a mechanism to mitigate it.
This is the worst possible scenario for a lending protocol, as the inability to execute liquidations leaves the protocol vulnerable to additional bad debt. Natalie Newson, a senior blockchain security researcher at CertiK, warned that Aave is in severe trouble, emphasizing that 100% utilization signifies not only a lack of liquidity but also the failure of the protocol's self-defense mechanisms. Liquidations require liquidity to function; without it, undercollateralized positions cannot be closed, and bad debt accumulates, leaving the protocol in an irrecoverable situation without external assistance. Newson highlighted that Aave's issues stem not from a direct hack but from the fallout of the KelpDAO bridge failure, which should be a concern for the entire DeFi community.
The interconnectivity that makes DeFi powerful also amplifies the risk of a single point of failure, turning it into a large-scale disaster. Aave's risk framework had anticipated the possibility of 100% utilization, with former Risk Manager Alex Bertomeu-Gilles noting in 2020 that at this level, 'no liquidity is left,' and the situation becomes 'problematic' as depositors are unable to withdraw their funds. Technical analyst Duo Nine was the first to point out that Aave had reached 100% utilization, explaining that following the rsETH exploit and the subsequent bad debt incurred by Aave, large investors like Justin Sun and MEXC exchange withdrew billions, initially causing the ETH market to hit 100% utilization and later spreading to USDT and USDC pools as over $6 billion in assets left the protocol within hours.