The Aave lending protocol, one of the largest decentralized platforms, has effectively come to a standstill after all its core markets reached 100% utilization, resulting in a freeze on user withdrawals totaling billions of dollars in crypto assets. According to DeFi Warhold, this situation signifies that the protocol has depleted its liquidity, rendering it unable to facilitate withdrawals or process liquidations.
Approximately $5 billion in stablecoins, including USDT and USDC, are now locked within the protocol, with no clear exit strategy. The crisis unfolded on April 18, following a $292 million exploit of the Kelp DAO rsETH bridge, where an attacker utilized forged cross-chain messages to mint unbacked rsETH, which was then used as collateral to borrow nearly $200 million in WETH on Aave. As news of the 'bad debt' spread, a bank-run scenario ensued, with $6.6 billion exiting the protocol within a 24-hour period.
Aave founder Stani Kulechov declined to comment on the situation, stating he had nothing useful to add. DeFi Warhold explained that 100% utilization across all markets is akin to a complete halt, where no liquidity is available for withdrawals, and liquidations cannot be executed, leaving $3 billion in USDT and $2 billion in USDC stuck without a viable exit. Furthermore, the analyst warned that if market prices fluctuate, the bad debt will compound, with no mechanism in place to mitigate it.
This scenario is particularly dire for a lending protocol, as it leaves the platform vulnerable and unable to protect itself against further bad debt. Natalie Newson, a senior blockchain security researcher at CertiK, concurred that Aave is in a precarious position, emphasizing that 100% utilization not only indicates a lack of liquidity but also signifies that the protocol's internal defense mechanisms are compromised. Newson highlighted that liquidations require available liquidity to function; without it, undercollateralized positions cannot be closed, leading to an accumulation of bad debt that the protocol cannot recover from without external assistance.
The crisis underscores the interconnected nature of the DeFi system, where the failure of one component can have far-reaching consequences. Aave's risk framework had previously anticipated the scenario of 100% utilization, with former Risk Manager Alex Bertomeu-Gilles noting in 2020 that at such levels, no liquidity remains, and the situation becomes problematic for depositors seeking to withdraw their funds.
The technical analyst Duo Nine was among the first to identify that Aave had reached 100% utilization, following the rsETH exploit and the subsequent withdrawal of billions by major players like Justin Sun and the MEXC exchange. As these large investors withdrew their assets, the ETH market initially reached 100% utilization, soon followed by the USDT and USDC pools, resulting in over $6 billion in assets leaving the protocol within hours and leaving these markets with locked funds.