Decentralized lending platform Aave has effectively come to a standstill after its major lending protocols exhausted their available funds, rendering users unable to withdraw billions of dollars in cryptocurrency. According to DeFi Warhold, this 100% utilization signifies a complete depletion of liquidity, making it impossible for users to access their assets.
Approximately $5 billion in stablecoins, including USDT and USDC, are currently locked, with the protocol lacking the necessary liquidity to facilitate payouts. The crisis unfolded on April 18, following a $292 million exploit of the Kelp DAO rsETH bridge, where an attacker utilized forged cross-chain messages to mint unbacked rsETH, which was then used as collateral to borrow nearly $200 million in WETH on Aave. As news of the 'bad debt' spread, a bank-run scenario ensued, resulting in a total of $6.6 billion exiting the protocol within 24 hours. When approached for comment, Aave founder Stani Kulechov stated that he had 'nothing useful to say.' DeFi Warhold emphasized that 100% utilization across all markets is akin to a complete halt, implying that no liquidity is available for withdrawals, and liquidations cannot be processed.
Consequently, $3 billion in USDT and $2 billion in USDC are stuck with no clear exit strategy. The situation is further exacerbated by the fact that if prices fluctuate, the bad debt will compound, with no mechanism in place to mitigate it.
DeFi Warhold asserted that this is the worst possible scenario for a lending protocol, as the inability to execute liquidations leaves the protocol vulnerable to further bad debt. Natalie Newson, a senior blockchain security researcher at CertiK, concurred that Aave is in serious trouble, stating that 100% utilization signifies not only a lack of liquidity but also the failure of the protocol's self-defense systems.
Liquidations require liquidity to function, and without it, undercollateralized positions cannot be closed, leading to a proliferation of bad debt. Newson noted that Aave's situation is a consequence of the KelpDAO exploit, which affected the entire DeFi system, rather than a direct hack.
The interconnectivity that makes DeFi powerful also increases the risk of a single point of failure triggering a large-scale disaster. Aave's risk framework had anticipated the possibility of 100% utilization, with former Aave Risk Manager Alex Bertomeu-Gilles warning in 2020 that at this level, 'no liquidity is left' and the situation becomes 'problematic' for depositors.
Technical analyst Duo Nine was the first to highlight that Aave had reached 100% utilization, citing the withdrawal of billions of dollars by whales such as Justin Sun and MEXC exchange as a contributing factor. As the crisis continues to unfold, concerns about the stability and security of the DeFi ecosystem are growing.