Aave Risk Stewards Restore Rates After Binance Hack Lending Freeze

Aave's risk stewards posted an update to the protocol's governance forum on October 31, 2026, recommending that Slope2 interest-rate parameters be restored to pre-incident levels across Aave V3 and Aave V4 — the final step in unwinding a two-day emergency response to the October 29 Binance hot-wallet exploit. Risk provider LlamaRisk wrote in the governance post that the affected reserves "are no longer frozen" and that borrow rates at or below the optimal utilization point remain unaffected by the reversal.

How the Binance exploit reached Aave

LlamaRisk's own incident report on the Aave governance forum lays out the chain of events. At 20:24 UTC on October 29, 2026, a compromised Binance hot wallet on Ethereum sent roughly 63 tokens and 167,464 ETH to a single address in one transaction, with LlamaRisk's writeup noting the same address received a further 28,006 ETH from a second hot wallet. Between 20:58 and 21:01 UTC — roughly 40 minutes before Aave's guardians froze markets — a wallet in the exploiter's cluster supplied $60 million in USDT to Aave V3 Ethereum Core and borrowed 19,762 WETH, worth about $44.6 million at the time, per the same forum post.

LlamaRisk said the position "does not put Aave suppliers at risk" and that no exploiter-linked wallet had interacted with the protocol since 21:01 UTC. Rather than freeze only the tokens taken from Binance, Aave's guardian multisigs froze 175 reserves on V3 across 16 networks and 117 reserves on V4 across four networks, reasoning that the exploiter could otherwise swap stolen funds into any listed asset. A separate, earlier October 30 forum post detailed temporary Slope2 rate cuts designed to cap variable borrow rates on stablecoin and WETH reserves at 10.00% APR as frozen reserves pushed utilization higher, since LlamaRisk explained that withdrawals during a freeze raise utilization because new supply cannot offset them. A linked October 30 post also cut borrow and draw caps on the largest reserves to roughly 2% above pre-exploit borrowing levels, according to the Aave governance forum.

What the rate reversal signals

The October 31 Slope2 restoration — raising Slope2 for USDC and USDT back to 10.00% and DAI back to 35.00%, per the governance post — marks the protocol's own assessment that the acute phase of the incident has passed. The post does not state when the related borrow and draw cap reductions will be reversed, leaving that step as an open item in the same governance thread.

The episode illustrates a recurring pattern in DeFi risk management: a centralized exchange's security failure can propagate into decentralized lending markets within the hour, through ordinary borrowing activity rather than any flaw in the lending protocol itself. Readers tracking Aave or exposed to reserves on Ethereum-based lending markets can follow the same governance thread for further parameter updates, including any eventual reversal of the October 30 borrow-cap reductions.