Aave Fork Liquidation Disaster: Flawed Threshold Change Triggers Mass ETH Position Wipeout

A recent incident on Pac Finance, an Aave fork on the Blast network, resulted in the liquidation of user positions worth over $26 million due to an erroneous threshold change. The Aave fork, which operates on Coinbase's layer-2 chain Blast, inadvertently reduced its liquidation threshold during an attempt to adjust its loan-to-value (LTV) parameters. The result was a sweeping wipeout of Ether-collateralized (ETH) positions on the platform. Pac Finance has acknowledged the error and is working on a plan to mitigate the issue, emphasizing the importance of protocol spin-offs having in-depth knowledge of software and parameters to avoid such mishaps.

Aave Fork Liquidation Catastrophe: Exploiting an Erroneous Threshold Change

In a glaring oversight, a fork of the renowned decentralized finance (DeFi) lending protocol Aave, operating on Coinbase's layer-2 Blast network, inadvertently altered its liquidation threshold, triggering a catastrophic liquidation of Ether-collateralized (ETH) positions.

The Devastating Sweep

On April 11, Pac Finance, as the Aave iteration on Blast is known, attempted to modify its loan-to-value (LTV) parameters. However, instead of achieving the intended outcome, the erroneous change lowered the liquidation threshold, unsuspectedly setting the stage for a mass liquidation of ETH-collateralized positions.

According to Will Sheehan, Founder of block explorer Parsec, the Aave fork incident on Blast resulted in a staggering loss of up to $24 million for one single user. On-chain analysis further revealed substantial losses for participants in the form of ezETH denominations, totaling thousands of dollars.

Mea Culpa: Pac Finance Acknowledges the Blunder

Hours after the issue was brought to light, Pac Finance admitted the mistake, confirming that impacted users had been contacted. The team also announced that a plan to rectify the error was underway.

In a statement, the Pac Finance team explained, "In our effort to adjust the LTV, we tasked a smart contract engineer to implement the necessary changes. However, it was discovered that the liquidation threshold was unexpectedly altered without prior notification to our team, leading to the current issue."

Community Engagement and Governance

To prevent future mishaps, Pac Finance pledged to establish a community forum dedicated to discussing future upgrades and alterations to its DeFi lending protocol. Additionally, the team announced plans to deploy a governance contract, reinforcing transparency and fostering user trust.

Protocol Spin-Offs: A Cautionary Tale

Stani Kulechov, Founder of blockchain developer Avara, the parent company behind Aave's project, highlighted the incident as a sobering reminder of potential pitfalls associated with protocol spin-offs.

"A fundamental problem with forking code is the lack of in-depth knowledge of the software and the parameters," Kulechov observed.

Lending: A DeFi Powerhouse

The lending sector remains a driving force in DeFi, enabling users to borrow and contribute liquidity to the flourishing cryptocurrency ecosystem. DefiLlama estimates that lending protocols currently hold approximately $35 billion in total value locked (TVL).

Aave stands as the undisputed leader in this market, boasting $11.5 billion in TVL and a presence across 12 chains, including Ethereum, Arbitrum, Polygon, Optimism, Avalanche, Gnosis, Base, Metis, Binance Smart Chain, Scroll, Fantom, and Harmony. Notably, Aave has also launched its stablecoin, GHO, to rival Maker's DAI token on Ethereum's blockchain.

A Call for Vigilance

The Aave fork liquidation catastrophe serves as a stark reminder of the importance of meticulous code review and comprehensive risk management practices in the rapidly evolving DeFi landscape. As protocol spin-offs continue to proliferate, a heightened level of due diligence and community engagement is imperative to minimize the likelihood of similar incidents in the future.