Aave V3 security incidents
-
Aave founder says V3 unaffected after third-party adapter exploit drains $305K
Aave founder Stani Kulechov stated that Aave v3 remained unaffected after an attacker exploited a third-party adapter, draining approximately $305,000 from two Safe multisig wallets.
-
[September 10, 2026] Proposed Changes to Spark for Upcoming Spell
Spark protocol is proposing several changes across Ethereum and Gnosis Chain, including offboarding unused integrations, deprecating LBTC as collateral, and fully deprecating SparkLend on Gnosis Chain by setting LTV and liquidation thresholds to 0%. These changes aim to reduce exposure and consolidate revenue, with some actions requiring governance polls and others falling under existing risk parameter modification authorities.
-
Fractal Protocol hacked
Fractal Protocol's USDF vault on Arbitrum was exploited due to a smart contract logic flaw, resulting in the loss of approximately 13,700 USDC.e. The exploit involved a flash loan and re-entrant calls that manipulated accounting issues.
-
Aave V3 — Oracle Misconfiguration
Aave V3 experienced an oracle misconfiguration by Chaos Labs, which undervalued wstETH by approximately 2.85%. This led to wrongful liquidations on 34 positions, resulting in losses of about $862,000. Aave DAO compensated affected users.