Share this article
Aave V2 Users Temporarily Unable to Access $120M on Polygon After Governance Bug
All funds remain safe and a governance proposal is underway to update the faulty strategy, developers said.
May 23, 2023, 6:56 a.m.
Some Aave version 2 (V2) users are temporarily unable to access their funds stuck on the decentralized exchange's deployment on the Polygon blockchain after a strategy containing a faulty bug went live last week.
Decentralized finance (DeFi) protocol Aave allows users to lend and borrow tokens on several blockchains, such as Ethereum, Polygon and Avalanche. The extent of this sometimes causes compatibility bugs to arise, temporarily rendering parts of the platform inaccessible to users and leave funds stuck.
An upgrade last week to the “ReserveInterestRateStrategy” caused the issue, security firm BlockSec tweeted. Affected tokens include tether , bitcoin , ether (ETH) and polygon (MATIC).
The ReserveInterestRateStrategy contract is a core contract in Aave that helps calculate and apply interest rates to borrowed loans.
“The root of the problem is that, for legacy reasons, the v2 version used on Aave v2 Polygon (and Avalanche) is slightly different from Aave v2 Ethereum, in regards to the interface used by the LendingPool to call the rate strategy of an asset,” Aave community member BDGLabs explained.
“The new interest rate strategies applied to those assets respect the interface of Aave v2 Ethereum, but not v2 Polygon, so when the LendingPool queries the strategy for the current rate, this call reverts, and so does the action “wrapping” it (e.g. deposit, borrow, etc),” the firm added.
.@AaveAave the latest upgrade of ReserveInterestRateStrategy in Aave V2 (Polygon) has caused a temporary halt of the protocol, impacting assets worth ~$110M!
— BlockSec (@BlockSecTeam) May 19, 2023
The root cause is the new ReserveInterestRateStrategy is only compatible with Ethereum, not compatible with Polygon. https://t.co/kg5696QNPo pic.twitter.com/Ze3zSBS8Ck
A fix is already in place, voting on by community members and users can top up funds on the network, an Aave governance proposal shows.
Other versions of Aave on Polygon continue to work smoothly as of Tuesday. AAVE tokens were up 2.7% in the past 24 hours, in line with a broader market jump.
More For You
An attacker drained 116,500 rsETH, roughly 18% of circulating supply, from Kelp's LayerZero-powered bridge on Saturday, triggering emergency freezes across Aave, SparkLend, Fluid and Upshift.
What to know:
- An attacker exploited Kelp DAO's LayerZero-powered bridge to drain 116,500 rsETH—about $292 million and roughly 18 percent of the token's circulating supply—triggering an emergency pause of core contracts.
- Because the bridge held reserves backing rsETH on more than 20 networks, the loss has raised doubts about the backing of rsETH...
