Aave Liquidations Triggered by Oracle Configuration Issue

Approximately $27 million in borrower positions were liquidated on the decentralized lending platform Aave on March 10, 2026, due to a configuration issue within its CAPO risk oracle system, according to risk management firm Chaos Labs. The incident highlights the critical role of oracles in maintaining the stability of decentralized finance (DeFi) protocols.

What Happened?

The liquidations stemmed from a temporary discrepancy in how Aave’s CAPO risk oracle valued wstETH (wrapped staked ETH), a token representing staked ether from Lido. The CAPO system, designed to limit the rate at which yield-bearing tokens like wstETH can increase in value, calculated a maximum allowed exchange rate lower than the actual market value. This effectively undervalued wstETH by approximately 2.85%, pushing some borrowing positions below their safety thresholds and triggering automatic liquidations.

The Role of Oracles in DeFi

Oracles are essential services that feed price data from external sources into blockchain applications. Lending protocols like Aave rely on them to determine when a borrower’s collateral is insufficient to cover their loan, initiating liquidation to protect the protocol. A misconfigured oracle can have significant consequences, as demonstrated by a recent incident involving Moonwell, where a similar issue led to nearly $1.8 million in bad debt CoinDesk.

CAPO and the wstETH Issue

While the underlying risk oracle reported correct market values, the problem lay within the CAPO system’s configuration. Stale parameters in a smart contract, specifically a mismatch between a reference exchange rate and its timestamp, caused the system to miscalculate the maximum allowed exchange rate for wstETH TodayOnChain. This resulted in the protocol perceiving wstETH as less valuable than its market price.

No Bad Debt, But Liquidator Profits

Despite the significant liquidations, Aave did not incur any bad debt. Liquidators – traders or bots that repay risky loans in exchange for discounted collateral – profited from the temporary price discrepancy, capturing roughly 499 ETH in liquidation bonuses and profits CoinDesk.

Responses and Reassurances

Stani Kulechov, founder and CEO of Aave Labs, stated that there was “no impact to the Aave Protocol” CoinDesk. Omer Goldberg, CEO of Chaos Labs, emphasized the importance of risk oracles in securing DeFi protocols, noting that they have secured “hundreds of billions in loans, liquidations, and markets” and assured that “Every affected user will be fully reimbursed” CoinDesk. A Lido contributor confirmed the issue was specific to the oracle mechanism and did not affect the Lido protocol itself.

Key Takeaways

• The incident underscores the critical importance of accurate and reliable oracle data in DeFi.
• Configuration issues within risk management systems, like Aave’s CAPO oracle, can trigger significant liquidations.
• Despite the liquidations, Aave avoided bad debt, and affected users are expected to be reimbursed.
• The event highlights the ongoing need for robust risk management and monitoring in the DeFi space.