Decentralized lending giant Aave has effectively halted operations after all its primary lending protocols exhausted their available funds, rendering users unable to access billions of dollars in cryptocurrency. DeFi expert DeFi Warhold explained that the 100% utilization signifies a complete lack of liquidity, preventing withdrawals and liquidations from being processed.
Approximately $5 billion in stablecoins, including USDT and USDC, are now locked within the protocol, which lacks the necessary liquidity to facilitate payouts. The crisis unfolded on April 18, following a $292 million exploit of the Kelp DAO rsETH bridge, in which an attacker utilized forged cross-chain messages to mint unbacked rsETH.
This was then used as collateral to borrow nearly $200 million in WETH, resulting in a 'bad debt' that triggered a bank-run-like scenario. Over $6.6 billion exited the protocol within a 24-hour period as news of the incident spread.
When approached for comment, Aave founder Stani Kulechov stated he had 'nothing useful to say.' DeFi Warhold emphasized that the 100% utilization across all markets is equivalent to a complete halt, with no liquidity available for withdrawals and liquidations unable to be processed. As a result, $3 billion in USDT and $2 billion in USDC are stuck without a clear exit strategy. The situation is further complicated by the potential for bad debt to compound if prices fluctuate, with no mechanism in place to mitigate this risk. According to DeFi Warhold, this scenario represents the worst possible situation for a lending protocol, as it leaves the platform without a means to protect itself against additional bad debt.
Natalie Newson, a senior blockchain security researcher at CertiK, concurred that Aave is in serious trouble, highlighting that 100% utilization not only indicates a lack of liquidity but also signifies that the protocol's self-defense systems are compromised. Liquidations require liquidity to function, and without it, undercollateralized positions cannot be closed, leading to a perpetual accumulation of bad debt.
This leaves the protocol in a precarious situation from which it may not be able to recover without external assistance. Newson noted that Aave's issues stem from the fallout of the KelpDAO exploit, rather than a direct hack, and that this distinction should be a concern for the entire DeFi community. The interconnectivity that makes DeFi powerful also increases its vulnerability to large-scale disasters, as a single point of failure can have far-reaching consequences. Aave's risk framework had previously anticipated the possibility of 100% utilization, with former Aave Risk Manager Alex Bertomeu-Gilles warning in 2020 that at this level, 'no liquidity is left' and the situation becomes 'problematic' for depositors seeking to withdraw their funds.
Technical analyst Duo Nine was the first to highlight that Aave had reached 100% utilization, noting that the crisis began when the rsETH exploit led to bad debt and prompted major players like Justin Sun and MEXC exchange to withdraw billions from AAVE.