Scan to download
BTC $70,750.53 +1.48%
ETH $2,073.41 +2.27%
BNB $653.54 +2.00%
XRP $1.42 -4.56%
SOL $81.67 -4.53%
TRX $0.2795 -0.47%
DOGE $0.0974 -3.83%
ADA $0.2735 -4.22%
BCH $458.92 +3.25%
LINK $8.64 -2.97%
HYPE $28.98 -1.81%
AAVE $122.61 -3.42%
SUI $0.9138 -6.63%
XLM $0.1605 -4.62%
ZEC $260.31 -8.86%
BTC $70,750.53 +1.48%
ETH $2,073.41 +2.27%
BNB $653.54 +2.00%
XRP $1.42 -4.56%
SOL $81.67 -4.53%
TRX $0.2795 -0.47%
DOGE $0.0974 -3.83%
ADA $0.2735 -4.22%
BCH $458.92 +3.25%
LINK $8.64 -2.97%
HYPE $28.98 -1.81%
AAVE $122.61 -3.42%
SUI $0.9138 -6.63%
XLM $0.1605 -4.62%
ZEC $260.31 -8.86%

labs

Chaos Labs: The Aave approximately $27 million liquidation event was caused by a configuration issue with the CAPO risk oracle

According to an analysis report released by Chaos Labs, the recent liquidation event of approximately $27 million in Aave was caused by a configuration issue with the CAPO risk oracle.The root cause lies in the inconsistent update constraints at the smart contract level: the snapshotRatio parameter is limited by an on-chain constraint that allows only a 3% increase every 3 days, preventing it from being updated directly from approximately 1.1572 to the target value of about 1.2282, and it can only increase to about 1.1919; meanwhile, the snapshotTimestamp was successfully updated to a timestamp from 7 days ago. This misalignment between the ratio and the timestamp led to the CAPO calculating an upper exchange rate (approximately 1.1939) that was about 2.85% lower than the actual market exchange rate, triggering the liquidation of approximately 10,938 wstETH. No bad debt was incurred by the protocol during the event.Chaos Labs and BGD Labs have immediately reduced the wstETH borrowing limit for affected instances to 1 and manually aligned the parameters to restore the exchange rate through Risk Steward. A total of 141.5 ETH has been recovered through BuilderNet, which will be used to compensate affected users, while the remaining amount will be covered by the Aave treasury. The amount expected to be temporarily compensated by the DAO is not anticipated to exceed 345 ETH.

Aave Labs releases the complete transparency audit report for the Aave V4 security program

According to official news, Aave Labs has released the complete transparency report of the Aave V4 security program, including methods, processes, and results, endorsed by several security agencies such as Trail of Bits, Blackthorn, and Certora.Through manual audits, formal verification, invariant testing, fuzz testing, and public security competitions, approximately 345 days of security reviews have been conducted. The program is supported by a dedicated security budget of $1.5 million approved by the DAO.Aave Labs announced that it will continue five core commitments from the Aave V4 security program: embedding formal verification in the early development stages to ensure that architectural design is guided by secure methodologies rather than just verification; adopting a layered security approach, including manual reviews, formal verification, invariant testing, AI-assisted checks, fuzz testing, and public security competitions to cover more potential vulnerabilities; maintaining continuous security coverage, with formal verification frameworks and invariant testing suites running continuously alongside protocol iterations; establishing a long-term bug bounty program to leverage a broader security community for ongoing monitoring; and optimizing AI scanning capabilities to continuously enhance the level of intelligent security detection in future versions based on existing testing experiences.
app_icon
ChainCatcher Building the Web3 world with innovations.