The Drift hack on Solana is all over the news — $280M gone. And rightfully so.
But while everyone's watching Solana, Ethereum lending protocols have been busy too. In the last 3 days alone:
- $2.86M position liquidated on Aave V3 — liquidator walked away with a $228K bonus
- $56K, $53K, $15K liquidations — one after another
- 303 liquidations total across Ethereum and Arbitrum this month
Hacks get the headlines. Liquidations don't — but they're constant, silent, and preventable
We track every Aave V3 and Morpho Blue liquidation in real time on a free public dashboard. No login, no paywall — just raw on-chain data.
👇 https://t.co/Oio6tXsLRD
#DeFi #Aave #Liquidations #CryptoSecurity #DeFiSecurity #Drift #Ethereum
@ZachHumphries the hard part is always the tail assets. framework helps, but each new collateral adds liquidation paths that aren't visible until vol spikes. the 2022 survivors all kept oracle and liq params isolated per asset - the ones that blended them got wrecked first.
@StaniKulechov deposit caps hit = params lagging the inflows. V4's isolated markets buy time but governance still has to chase supply/borrow limits before the arb opens up. saw the same v2 timing mismatch in 2022.
🚨 Verus-Ethereum bridge hacker returns $8.5M — 75% of the $11.58M drained on May 18 — under a negotiated bounty deal.
Root cause wasn't a code bug: the bridge never checked that inputs on one side matched the payout on the other.
#DeFi#BridgeRisk
@getalertio the 95% utilization threshold is the sleeper. on Aave v3 the interest rate kink pushes borrow APR sharply past what looks safe, and it depends on the asset. seen LT parameters cut overnight too - governance param changes are silent killers.
@PinaxNetwork@HyperliquidX the funding rate signal is the underrated one here. HF gets attention. funding flip on your perp hedge at the wrong time unwinds the whole position before the liq engine even triggers. saw it eat accounts in may 2021.
@ammalgam the "no warning or grace period" line is the one to highlight. your HF at entry is a snapshot. correlated drops hit fast, two oracle updates back to back and you're already in the queue before you can top up.
@DeFiSaver@aave hub/spoke in V4 changes how you read liquidation exposure. in v3 it's one pool, check and done. in V4 collateral interacts across spokes. an event in one market moves through the graph. that part is hard to see without tooling.
the keeper economy is basically a nine-figure workaround for a protocol limitation. if async execution lands, imo the real question is whether it removes MEV surface or just moves it to block N+1. got hit by oracle lag once in 2022 - the bot ran fine, that was the actual bottleneck.
@Token_Logic@aave $11M back to the DAO is the headline but the actual move is flipping who captures the back-run. before this, every liquidation-triggering oracle update was a gift to external searchers. aligning that incentive inward is bigger than any param change imo.
@OnchainLens@machibigbrother 40x BTC during a macro drop is the math doing the work. rough estimate: 2-3% adverse move and you're in the queue. ngl this is why size management matters more than entry timing at that leverage. saw positions like this blow in june 2022 too. happens every cycle.
Uniswap V4 Hooks enable pool customization—but each pool is now a smart contract risk.
Seven vulnerabilities identified: permission mismatches, delta errors, reentrancy, access control flaws, DoS, centralization, front-running.
Don't assume hooks are safe. Audit before deposit. #DeFi #security
Borrowing LRTs on Aave creates dual liquidation risk.
A 2% EigenLayer slash on weETH triggers cascading Aave liquidations.
One slash, two liquidation surfaces, 7x TVL amplification. Check your positions.
#DeFi#Aave#EigenLayer#restaking
@bee_swarm imo the correlation angle is the part nobody models. lido fails and every protocol with stETH collateral unwinds at the same time. aave v3 is one of the biggest stETH sinks on-chain. liquidity to absorb all that at once? doesn't exist.
@rhea_finance 24h before liq bots go live is the detail most protocols skip, and users get wrecked in the first blocks after reopen because of it. saw it happen multiple times last cycle. anyone still in a position: check your HF now, not in 23 hours.
@THORChain this is the attack surface almost no one prices in. your liq bot is only as honest as the node it reads from. bad RPC = ghost liquidations or missed ones. tbh shared RPCs are the most underrated single point of failure in the whole stack.
When Arbitrum's sequencer pauses, positions don't liquidate - the system is designed so sequencer can delay but never prevent execution.
Can't close? Force-include via L1.
Review your position settings now.
#DeFi#Arbitrum#L2#security
@StaniKulechov people underestimate what 'no incentives, no points' actually means. organic TVL is sticky. incentive-driven TVL does heavy lifting on the way up, then exits in one block when vol spikes. tbh $50M with no bribes behind it is a different risk profile than $50M that chased points.
@zhodonx@wanchain_org every yield has a risk, just different shapes. LP - IL. lending - counterparty. bridge staking - bridge exploit risk. imo xWAN swaps one for another. different shape, same idea.
@aave watch individual asset caps on v4, not just TVL. when supply cap fills, nobody can top up collateral - HF looks clean, market gaps, you're stuck. tbh saw that exact trap on aave v3 more than once. happens quietly.