Aave Oracle Glitch Triggers $27M in Unfair wstETH Liquidations
A CAPO oracle misconfiguration on Aave caused 34 users to lose positions worth $27M, with full reimbursement pledged by the DAO.
A misconfigured oracle on Aave, the largest DeFi lending protocol, triggered $27 million in wrongful wstETH liquidations on March 10, affecting 34 users who should never have been liquidated.
What Happened
Aave's CAPO (Correlated Asset Price Oracle) reported a capped exchange rate of roughly 1.1939 for wstETH, well below the actual market rate of around 1.228. The 2.85% undervaluation triggered E-Mode liquidations across 34 positions totaling $27 million.
The root cause was an inconsistency between the snapshot ratio and the snapshot timestamp used for the CAPO system. An offchain process oversight failed to account for an existing onchain constraint, causing the oracle to underprice wstETH relative to ETH.
Liquidation bots moved within seconds, capturing 499 ETH (approximately $1.2 million) in bonuses by executing against positions that were not legitimately eligible for liquidation.
Why It Matters
The incident highlights a persistent risk in DeFi: oracle reliability. Even on a battle-tested protocol like Aave, a single misconfigured parameter can cascade into millions in losses.
No bad debt was incurred by the protocol itself. Aave recaptured 141 ETH through BuilderNet refunds and an additional 13 ETH in liquidation fees. The DAO has pledged to cover the remaining shortfall, with all 34 affected users set to receive full reimbursement up to the 345 ETH identified as excess liquidation windfall.
The event also raises questions about E-Mode risk parameters and whether additional safeguards, such as liquidation delay circuits or multi-oracle verification, should become standard for high-value positions.
What to Watch
The Aave DAO governance process for the reimbursement proposal is expected in the coming days. Community discussion has already begun around tighter oracle validation checks and potential circuit breakers for E-Mode positions. AAVE token price dipped briefly after the news but has since stabilized, suggesting the market views the DAO response as adequate.
Key Takeaways
This is a developing situation. The full reimbursement pledge demonstrates the maturity of Aave governance, but the incident serves as a reminder that oracle risk remains one of DeFi's most critical attack surfaces.
