The Aave decentralized lending platform has effectively come to a standstill after its major lending protocols exhausted their available funds, resulting in users being unable to withdraw billions of dollars in cryptocurrency. According to DeFi Warhold, the 100% utilization of Aave's markets signifies a critical state where the protocol lacks the necessary liquidity to facilitate withdrawals, and liquidations cannot be processed. Approximately $5 billion in stablecoins, including USDT and USDC, are currently locked within the protocol, which has no means to provide these assets to users.
The crisis began on April 18, following a $292 million exploit of the Kelp DAO rsETH bridge, where an attacker utilized forged cross-chain messages to mint unbacked rsETH, which was then used as collateral to borrow nearly $200 million in WETH. As news of the 'bad debt' spread, a significant bank-run dynamic took hold, resulting in $6.6 billion exiting the protocol within a 24-hour period.
Aave founder Stani Kulechov declined to comment on the situation, stating he had 'nothing useful to say.' DeFi Warhold emphasized that the 100% utilization of Aave's markets is equivalent to a complete halt, where no liquidity is available for withdrawals, and liquidations cannot be executed, leaving $3 billion in USDT and $2 billion in USDC 'stuck with no clean exit.' Moreover, the analyst warned that if market prices fluctuate, the bad debt will compound, and the protocol lacks a mechanism to address it. This situation is deemed the worst possible scenario for a lending protocol, as it is unable to protect itself against further bad debt when liquidations cannot be executed.
Natalie Newson, a senior blockchain security researcher at CertiK, concurred that Aave is in a precarious state, stating that '100% utilization doesn't just mean a lack of liquidity; it means the protocol's self-defense systems are down.' Newson explained that liquidations require liquidity to function; without it, undercollateralized positions cannot be closed, and bad debt continues to accumulate, placing the protocol in a situation from which it may not recover without external assistance. The KelpDAO exploit, which did not directly affect Aave, has nonetheless put the entire DeFi system to the test, demonstrating the interconnectedness and potential vulnerabilities of the ecosystem.
Aave's risk framework had anticipated the possibility of 100% utilization, with former Aave Risk Manager Alex Bertomeu-Gilles warning in 2020 that at this level, 'no liquidity is left,' and the situation becomes 'problematic' as depositors are unable to withdraw their funds. Technical analyst Duo Nine was the first to highlight Aave's 100% utilization, noting that following the rsETH exploit, whales such as Justin Sun and MEXC exchange withdrew billions from AAVE, causing the ETH market to reach 100% utilization and eventually spreading to USDT and USDC pools as over $6 billion in assets exited the protocol within hours.