Share this article

Kava Halted After Yield Farming Bug Discovered in Latest Release

The bug overpaid certain liquidity providers and will require a reboot to fix.

Updated Sep 14, 2021, 12:21 p.m. Published Mar 4, 2021, 7:23 p.m.
Kava bug

The security committee for Kava Labs, the company behind a new-generation DeFi platform, has halted the chain to address an inflation bug that over distributes yield farming rewards in its latest release.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the The Protocol Newsletter today. See all newsletters

  • To patch the bug and re-start the Kava chain, the development team are asking validators to revert to an earlier version of the software, Kava-4, before updating to the new Kava-6 version in roughly 12 hours, according to Messari.
  • Kava 5, the software version containing the bug, was released this week, shortly before the bug was discovered.
  • The platform's safety committee shut down the Kava-5 chain at block 459. Kava Labs is planning to replay the state and determine the source of the error.
  • “User funds are not affected. A fix is currently being worked on. Will update shortly,” a Kava Labs tweet reads.
  • According to Messari, the "high severity bug" was paying out liquidity providers on the platform "well above expected values."
  • These specific payouts are timelocked, the post explains, so they could not be sent to exchanges, just claimed by their users.
  • "Kava Labs' monitoring suite picked up the bug within minutes of Kava 5 launch, way before any HARD claims could actually be distributed – this was by design," said Scott Stuart, co-founder of Kava Labs, in a statement shared with CoinDesk.
  • Kava is a blockchain built on the Tendermint consensus algorithm and is also a participant in the Cosmos blockchain interoperability project.
  • Kava's HARD protocol is its cross-chain money market that allows users to lend, borrow, and earn with a variety of digital assets.
  • The Binance-backed chain went live last year and offers yield farming applications similar to those found in Ethereum’s DeFi ecosystem.

Updated Thursday, March 4, 2021, at UTC 20:53 UTC: This article was updated to include new information regarding development team recommendations for Kava node operators.

Updated Thursday, March 4, 2021, at UTC 22:05 UTC: Comments from Scott Stuart, co-founder of Kava Labs, and information about HARD protocol were added.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Blockstream Connects Lightning and Liquid for Faster, Private Bitcoin Payments

Adam Back, CEO Blockstream (second from right) speaks at Consensus Hong Kong 2025 by CoinDesk (CoinDesk/Personae Digital)

The new update enables trustless swaps between Lightning and Liquid, removing technical hurdles for fast, self-custodial BTC spending, the company said.

What to know:

  • Blockstream’s Green app now supports atomic swaps between the Lightning and Liquid networks, enabling private bitcoin payments without channel management.
  • The update lets users pay Lightning invoices directly from their Liquid bitcoin (LBTC) balances in a self-custodial way.
  • Upcoming features will add on-chain swap support and hardware wallet integration to extend multi-layer bitcoin interoperability.