Article by: Cointelegraph

Compiled by AididiaoJP, Foresight News

Key Points Summary

• A 2.85% temporary pricing discrepancy in wstETH collateral triggered approximately $27 million in liquidations on Aave. This event highlights how even minor technical issues in automated DeFi lending systems can lead to significant financial consequences.
• This liquidation wave occurred because the Aave system temporarily valued wstETH at approximately 1.19 ETH, while the market value was close to 1.23 ETH, causing some loan positions to be incorrectly flagged as undercollateralized.
• Price oracles are a critical infrastructure in DeFi, responsible for transmitting external market data to smart contracts to determine collateral value, assess loan health, and trigger automated liquidations.
• The root cause was not a failure in the price data source, but rather misconfiguration of Aave's CAPO risk oracle module. Outdated smart contract parameters in this module imposed a temporary cap on token exchange rates.

DeFi protocols rely on automated logic to handle tasks ranging from collateral management to risk assessment. While this mechanism builds a truly open and permissionless financial system, it also means that minor technical issues can rapidly escalate, causing significant financial disruption.

According to a report by risk monitoring firm Chaos Labs, a market downturn on March 10, 2026, triggered approximately $27 million in borrower position liquidations on Aave, clearly demonstrating this vulnerability. Within 24 hours, user positions valued at around $27 million were liquidated. Surprisingly, this event was not caused by a large-scale market sell-off, but rather by a brief 2.85% price deviation in the collateral asset wrapped staked ETH (wstETH).

This incident strongly reminds us that the reliability of price oracles and a robust risk management framework are essential for maintaining the stability of the DeFi ecosystem.

This article explains how a 2.85% pricing discrepancy in wstETH collateral triggered approximately $27 million in liquidations on the Aave lending protocol. It analyzes how oracle configurations, smart contract parameters, and automated liquidation mechanisms amplified a minor pricing error within the DeFi market.

When a wave of liquidations occurred on the Aave market, Chaos Labs, which closely monitors unusual activity on lending protocols, quickly identified and reported the situation. Initial market observers speculated that a price oracle malfunction may have caused collateral assets on the platform to be incorrectly priced.

Price oracles play a critical bridging role by providing external market prices to on-chain applications. In lending protocols like Aave, this pricing data directly determines whether a borrower’s collateral is sufficient to cover their loan. If the collateral value falls below the required safety threshold, the system automatically liquidates the position.

The core asset in this incident is wstETH, a token widely used as collateral in the DeFi lending ecosystem.

Liquidation speeds on lending protocols like Aave are typically much faster than traditional margin calls. Because DeFi markets operate 24/7 through automated smart contracts, positions can be liquidated within seconds once the collateralization ratio falls below the specified threshold.

wstETH (wrapped staked Ether) is a token issued by the liquid staking protocol Lido.

When users stake ETH through Lido, they first receive stETH, a token representing their staked ETH principal plus accumulated staking rewards. To enhance compatibility with various DeFi applications, stETH can be wrapped into wstETH.

Due to the continuous accumulation of staking rewards, one wstETH is typically worth slightly more than one ETH. This characteristic makes it an attractive and widely adopted collateral type in DeFi lending markets.

During this liquidation wave, a discrepancy emerged between the actual market value of wstETH and the valuation used by Aave’s risk system. Aave’s algorithm priced wstETH at approximately 1.19 ETH, while the broader market valuation was around 1.23 ETH at the time.

A valuation difference of approximately 2.85% makes positions collateralized with wstETH appear more undercollateralized than they actually are.

As a result, some borrowing positions fell below the required safety threshold, triggering Aave's automated liquidation process.

Price oracles are the foundational infrastructure of DeFi. Since blockchains cannot access real-world market data on their own, they rely on oracle services to provide external price information for assets. These price data directly impact:

• Collateral valuation
• Health of the borrowing position
• Basis for triggering liquidation

If the collateral price experiences a reported decline, the protocol may determine that the loan is undercollateralized and automatically liquidate the associated position.

Because this mechanism is entirely algorithm-driven, even minor pricing discrepancies can trigger significant cascading effects.

In DeFi, even minor price discrepancies can have significant consequences. Brief fluctuations in oracle or market prices—by just a few percentage points—can trigger cascading liquidations. This risk is especially pronounced when many borrowers use highly leveraged positions backed by volatile cryptocurrencies as collateral.

A thorough investigation confirmed that Aave's primary price oracle is functioning normally.

The issue actually stems from the Connected Asset Price Oracle (CAPO) risk module, an additional layer of protection implemented for specific assets.

The primary function of CAPO is to cap the rate of price appreciation for yield-bearing tokens like wstETH, aiming to mitigate the risks of sudden price spikes or potential oracle attacks.

However, in this incident, the issue arose due to inconsistent configurations within the CAPO module.

Chaos Labs disclosed that the issue stemmed from outdated parameters stored in the smart contract.

Two key parameters failed to synchronize:

• Reference exchange rate
• Timestamp associated with this exchange rate

Because these two parameters were not synchronized for refresh, the allowed exchange rate ceiling calculated by CAPO was temporarily lower than the actual market exchange rate at that time.

This caused the protocol to value wstETH approximately 2.85% below the market price.

Aave relies on price oracles—data sources that provide real-time asset prices to smart contracts. If these data sources briefly reflect abnormal market prices from exchanges, the protocol automatically recalculates collateral value and may trigger liquidation.

Once the collateralization ratio falls below the safety threshold, Aave’s automated liquidation engine is immediately triggered.

Liquidators—typically high-speed trading bots—intervene quickly by repaying part of the borrower’s debt in exchange for the corresponding collateral at a predetermined discount.

In this event, approximately $27 million in borrowing positions were liquidated.

The liquidator exploited this brief price discrepancy to earn a total profit of approximately 499 ETH (including liquidation bonuses).

Despite the large liquidation size, the Aave protocol itself incurred no bad debt. Aave founder Stani Kulechov stated, “It had no impact on the Aave protocol.”

Chaos Labs noted that once positions breached the safety threshold, the platform’s core risk management and liquidation mechanisms functioned as designed. Therefore, the impact of this event was limited to the affected borrowers and did not threaten Aave protocol’s overall solvency or stability. It was the temporary, artificial suppression of collateral values that caused certain lending positions to fall below the liquidation line.

The Aave governance layer subsequently proposed compensating affected users by utilizing recovered funds and the decentralized autonomous organization (DAO) treasury. This approach reflects a new trend in DeFi governance: protocols are beginning to treat such technical incidents as systemic infrastructure risks and are increasingly inclined to compensate受损 users rather than leaving them to bear the full loss.

This incident highlights that oracle mechanism design is both one of the most critical components and one of the most vulnerable points in DeFi infrastructure.

When automated mechanisms manage billions of dollars in collateral, even minor configuration errors can lead to consequences far beyond expectations.

Similar incidents have occurred on other DeFi platforms. For example, one platform once incorrectly valued Coinbase’s wrapped staked ETH (cbETH) at approximately $1 due to an oracle configuration error, when its actual value was around $2,200, causing widespread disruption.

These cases demonstrate that maintaining reliable and accurate price data sources remains an ongoing challenge in the decentralized finance ecosystem.

Contributors to the Lido ecosystem have explicitly stated that this liquidation was not caused by any fault or defect in the wstETH token itself.

The token operated normally throughout the event, and the underlying Lido staking protocol remained fully available and unaffected.

The core issue lies in the Aave lending protocol, where its own risk management configuration led to inconsistencies in how price data was processed and interpreted.

As decentralized finance continues to evolve, protocols are deploying increasingly sophisticated risk management systems to accommodate yield-bearing assets like wstETH.

These assets present unique pricing challenges because their value continuously grows as staking rewards accumulate.

Therefore, an effective risk model must properly address the following elements:

• Fluctuating exchange rates
• Accumulated staking rewards
• Time-dependent parameter updates
• Precise synchronization of all parameters of the smart contract

Even minor inconsistencies among these factors can escalate into large-scale liquidation events.