Key Highlights:
- LlamaRisk is adjusting draw caps across Aave markets using a formula based on pre-exploit or observation-time debt plus roughly 2%, resulting in substantial reductions such as a combined 95 million cut to GHO ceilings.
- Temporary Slope2 interest rate reductions have been executed to shield borrowers from surging borrowing costs during pool freezes, though conflicting figures remain regarding the universal 10% rate cap target.
- A multi-wave rollback framework sets Loan-to-Value (LTV) and collateral factors to zero for major assets, restricting fresh borrowing leverage while leaving existing liquidation thresholds unchanged on Aave V3.
LlamaRisk Recalibrates Aave Borrowing Caps Following Market Disruptions
In response to an exploit, risk assessment firm LlamaRisk has outlined and executed adjustments across Aave markets, focusing closely on borrowing caps and protocol liquidity. In Aave V4 architecture, draw caps govern individual credit lines through which a lending spoke accesses capital from a shared liquidity hub. While affected reserves remain frozen, these limits cannot facilitate new borrowing. However, restructuring these boundaries remains essential for stabilizing the platform before full market access resumes.
LlamaRisk’s methodology for setting new caps relies on taking the larger value between the debt accrued prior to the exploit and the debt recorded at the observation window. The framework then adds approximately 2% to that baseline, establishing asset-specific rounded ceilings. This strategy primarily targets larger borrowing corridors with more than $10 million in debt before the incident alongside more than $10 million in spare capacity. By recalculating limits using this approach, risk managers can sharply reduce legacy ceilings while ensuring the cap sits just above earlier borrowing levels.
Debt repayments have altered available room under several critical asset limits. As of October 30, the Core $USDC listed cap maintained roughly 248.4 million $USDC in headroom above active debt due to repayments pushing borrowing below pre-exploit benchmarks. Meanwhile, Core WETH displayed a ceiling of 1.79 million WETH against an active debt load of 1,749,730 WETH. LlamaRisk noted that current debt served as the sizing baseline for Core WETH because it accounted for the exploiter’s 19,762 WETH loan. Concurrently, queued changes for the native stablecoin GHO slash Core’s ceiling from 150 million to 105 million GHO and Prime’s cap from 85 million to 35 million GHO, producing an aggregate reduction of 95 million GHO.
Cash Constraints, Liquidity Utilization, and Slope2 Rate Adjustments
Throughout the duration of the market freeze, protocol mechanics prohibited new deposits and borrowing, while user withdrawals, loan repayments, and liquidations remained operational. Depositors were also prevented from supplying additional collateral to frozen pools. Because Aave rules stipulate that withdrawals are strictly limited to unborrowed liquidity, suppliers can only exit if their underlying positions maintain adequate health factors and sufficient tokens remain idle in the contract.
Liquidity constraints became evident early on October 30, when LlamaRisk tracked Core $USDC pool utilization at 97.8% at 00:26 UTC, with multiple other reserves registering 100% utilization. To protect existing borrowers from escalating costs in saturated pools, LlamaRisk executed temporary reductions to Slope2—the segment of Aave’s interest rate curve that accelerates steeply above optimal utilization. While the base rate, first slope, and optimal utilization points stayed fixed, flattening Slope2 eases interest accumulation on borrowers who cannot currently add collateral or access cash to repay principal.
Discrepancies remain within the reported interest rate models. While LlamaRisk described an across-the-board 10% borrowing ceiling as the primary target, its modeled full-utilization data documented 20% for Core DAI, 34% for Core USDtb, 25% for Monad mUSD, and 19% for Ethereum Core frxUSD. Similarly, Plasma GHO listed a proposed second slope of 5.25% in the executive summary compared to 11.5% in the technical specification. Because subsequent execution updates did not clarify which specific parameters took effect, users cannot treat the generalized 10% figure as an absolute ceiling across all impacted reserves.
Collateral Modifications and Wave-Based Rollback Rules
LlamaRisk’s broader protocol recovery strategy spans four distinct waves. An update issued at 13:49 UTC indicated that only the Aave V4 collateral-configuration phase had been formally executed. To curtail risk during the recovery phase, new borrowing power has been disabled across a wide basket of major tokens, setting collateral borrowing power to zero for USDT, USDC, USDT0, POL, WAVAX, sAVAX, XAUt, PAXG, and OP, encompassing their bridged and wrapped variations.
This risk-reduction posture manifests differently depending on the protocol version. On Aave V3, a zero loan-to-value (LTV) setting has been instituted, extending across Efficiency Mode (E-Mode). On Aave V4, the equivalent control is enforced by setting the asset’s collateral factor to zero. When market-wide freezes lift, users will be permitted to supply, withdraw, borrow, and repay these designated tokens within standard liquidity and balance constraints. Existing positions on V3 retain their historical liquidation thresholds, preventing the LTV reductions from directly deteriorating user health factors. Conversely, on V4, executing a new borrow, initiating a collateral withdrawal, or toggling collateral triggers an automatic shift of the existing position onto the zero-factor configuration. Furthermore, standard Aave V3 documentation mandates that reserves assigned a zero LTV must be disabled as collateral or entirely withdrawn before a user can pull other deposited assets.
Why This Matters
The calibrated adjustments deployed by LlamaRisk underscore the intricate mechanics required to stabilize decentralized money markets after severe security events. Balancing borrow ceilings against real-time debt levels prevents exploiters or automated liquidators from extracting excess capital from depleted spoke markets while enabling healthy repayments to replenish underlying hubs. Furthermore, adjusting interest rate curves like Slope2 addresses the market failure where high interest rates cease to incentivize new deposits because the reserve itself is closed to supply. The multi-wave recovery process demonstrates how risk parameters must balance systemic protocol security against the accessibility needs of legacy depositors seeking to withdraw assets.
Frequently Asked Questions
Why were Aave’s Slope2 borrowing rates temporarily lowered?
Slope2 was reduced to prevent borrowing rates from spiking to extreme levels while reserves were frozen. Normally, elevated interest rates attract fresh liquidity into under-supplied pools. However, because new deposits were disabled during the freeze, sky-high rates simply penalized existing borrowers without generating the new capital needed to service withdrawals.
How do the updated collateral rules affect existing loans on Aave V3 and V4?
On Aave V3, the liquidation thresholds remain unchanged, meaning the shift to a zero LTV does not immediately alter existing health factors or trigger forced liquidations. On Aave V4, the collateral factor is set to zero for specified assets; taking new borrows, toggling collateral settings, or withdrawing collateral will transition an existing loan onto the zero-factor configuration.
What determines whether a user can withdraw funds from a reopening reserve?
A supplier’s ability to withdraw relies on available, unborrowed liquidity within the specific pool and the maintenance of their position’s collateral health. High utilization levels mean funds can only be withdrawn as other users repay outstanding debts or as new supply is authorized to enter the protocol.
