A CAPO oracle misconfiguration on Aave caused 34 users to lose positions worth $27M, with full reimbursement pledged by the DAO.
A misconfigured oracle on Aave, the largest DeFi lending protocol, triggered $27 million in wrongful wstETH liquidations on March 10, affecting 34 users who should never have been liquidated.
Aave's CAPO (Correlated Asset Price Oracle) reported a capped exchange rate of roughly 1.1939 for wstETH, well below the actual market rate of around 1.228. The 2.85% undervaluation triggered E-Mode liquidations across 34 positions totaling $27 million.
The root cause was an inconsistency between the snapshot ratio and the snapshot timestamp used for the CAPO system. An offchain process oversight failed to account for an existing onchain constraint, causing the oracle to underprice wstETH relative to ETH.
Liquidation bots moved within seconds, capturing 499 ETH (approximately $1.2 million) in bonuses by executing against positions that were not legitimately eligible for liquidation.
The incident highlights a persistent risk in DeFi: oracle reliability. Even on a battle-tested protocol like Aave, a single misconfigured parameter can cascade into millions in losses.
No bad debt was incurred by the protocol itself. Aave recaptured 141 ETH through BuilderNet refunds and an additional 13 ETH in liquidation fees. The DAO has pledged to cover the remaining shortfall, with all 34 affected users set to receive full reimbursement up to the 345 ETH identified as excess liquidation windfall.
The event also raises questions about E-Mode risk parameters and whether additional safeguards, such as liquidation delay circuits or multi-oracle verification, should become standard for high-value positions.
The Aave DAO governance process for the reimbursement proposal is expected in the coming days. Community discussion has already begun around tighter oracle validation checks and potential circuit breakers for E-Mode positions. AAVE token price dipped briefly after the news but has since stabilized, suggesting the market views the DAO response as adequate.
This is a developing situation. The full reimbursement pledge demonstrates the maturity of Aave governance, but the incident serves as a reminder that oracle risk remains one of DeFi's most critical attack surfaces.
Key Aave contributor BGD Labs will end all technical work on April 1, citing centralization concerns and friction with Aave Labs over v4 development.
The DeFi lending protocol faces internal conflict over brand control and fee allocation, triggering a whale sell-off while founder Stani Kulechov buys the dip.
Bitwise submits SEC applications for ETFs covering AAVE, UNI, SUI, NEAR, and seven other altcoins, targeting March 2026 launch.
Disclaimer: News content is for informational purposes only and should not be considered financial advice. Market conditions can change rapidly. Always conduct your own research.
