Aave Lending Platform Reaches Critical State with 100% Utilization of Core Markets
Decentralized lending giant Aave has effectively halted operations after its core markets simultaneously reached 100% utilization, rendering users unable to withdraw billions in crypto, according to DeFi expert Warhold. Approximately $5 billion in stablecoins, including USDT and USDC, are currently locked due to the protocol's lack of liquidity. The crisis unfolded on April 18 following a $292 million exploit of the Kelp DAO rsETH bridge, where an attacker created unbacked rsETH through forged cross-chain messages, using it as collateral to borrow nearly $200 million in WETH on Aave. As news of the 'bad debt' spread, a bank-run scenario ensued, resulting in $6.6 billion exiting the protocol within 24 hours. When approached for comment, Aave founder Stani Kulechov stated, 'I do not have anything useful to say.' Hitting 100% utilization across all markets signifies a complete halt in liquidity availability for withdrawals, with liquidations unable to be processed, meaning $3 billion in USDT and $2 billion in USDC are stuck without a viable exit strategy, Warhold explained. The situation worsens if prices fluctuate, as bad debt compounds without a mechanism for coverage. This scenario represents the worst possible situation for a lending protocol, as it cannot protect itself from further bad debt when liquidations are unable to execute. Aave is in severe trouble, according to Natalie Newson, a senior blockchain security researcher at CertiK, who noted that 100% utilization not only indicates a lack of liquidity but also signifies that the protocol's self-defense mechanisms are inoperable. Liquidations require liquidity to function; without it, undercollateralized positions cannot be closed, leading to an accumulation of bad debt that the protocol cannot recover from without external assistance. Newson emphasized that Aave's situation is a result of the KelpDAO exploit's fallout, which did not directly hack Aave but rather caused it to become stuck, a distinction that should concern everyone in the DeFi space. The interconnectivity that makes DeFi powerful also turns a single point of failure into a large-scale disaster, affecting not just the protocol directly involved but the entire system. Aave's risk framework had anticipated the scenario of 100% utilization, with former Risk Manager Alex Bertomeu-Gilles stating in 2020 that at this level, 'no liquidity is left,' and the situation becomes 'problematic' as depositors are unable to withdraw their funds. Technical analyst Duo Nine highlighted that Aave hit 100% utilization following the rsETH exploit, which initially affected the ETH market, making withdrawals impossible, before spreading to USDT and USDC pools as over $6 billion in assets were withdrawn within hours.