Decentralized lending giant Aave has effectively come to a standstill after its core markets simultaneously reached 100% utilization, rendering users unable to withdraw billions of dollars in cryptocurrency. According to DeFi expert Warhold, this scenario signifies a complete lack of liquidity, making it impossible for the protocol to facilitate withdrawals or process liquidations. Approximately $5 billion in stablecoins, including USDT and USDC, are currently locked within the protocol, which has been unable to provide liquidity for these assets. The crisis unfolded on April 18, following a $292 million exploit of the Kelp DAO rsETH bridge, where an attacker utilized forged cross-chain messages to mint unbacked rsETH, using it as collateral to borrow nearly $200 million in WETH.
As news of the 'bad debt' spread, a bank-run scenario ensued, resulting in a total of $6.6 billion exiting the protocol within a 24-hour period. Aave founder Stani Kulechov declined to comment on the situation, stating he had nothing useful to say. Warhold emphasized that 100% utilization across all markets is equivalent to a complete halt, with no available liquidity for withdrawals and no mechanism for liquidations to occur, leaving $3 billion in USDT and $2 billion in USDC with no clear exit strategy.
The situation is further complicated by the fact that if prices fluctuate, the bad debt will compound, with no existing mechanism to mitigate it. This, according to Warhold, is the most critical situation a lending protocol can face, as the inability to execute liquidations leaves the protocol vulnerable to further bad debt without any means of self-protection. Natalie Newson, a senior blockchain security researcher at CertiK, concurred that Aave is in severe trouble, highlighting that 100% utilization signifies not only a lack of liquidity but also the failure of the protocol's self-defense systems.
Newson explained that liquidations require available liquidity to function; without it, undercollateralized positions cannot be closed, and bad debt continues to accumulate, placing the protocol in a situation from which it cannot recover without external assistance. The researcher noted that Aave's troubles were not the result of a direct hack but rather a consequence of the KelpDAO bridge failure, which has far-reaching implications for the entire DeFi ecosystem. Newson and Warhold agreed that the interconnected nature of DeFi, while powerful, also poses significant risks, as a single point of failure can escalate into a large-scale disaster.
Aave's risk framework had anticipated the possibility of 100% utilization, with former Aave Risk Manager Alex Bertomeu-Gilles warning in 2020 that at this level, no liquidity would remain, and the situation would become problematic for depositors seeking to withdraw their funds. Technical analyst Duo Nine was the first to identify that Aave had reached 100% utilization, following the rsETH exploit and the subsequent withdrawal of billions by major players like Justin Sun and MEXC exchange.