Friday, April 19, 2024

Bug in Aave V2 Polygon causes some assets to become stuck in contracts

189
SHARES
1.5k
VIEWS
Sign up an get up to $1000 USDT!

Related articles


A bug in an older model of crypto lending protocol Aave is obstructing customers from interacting with Wrapped Ether (WETH), Tether (USDT), Wrapped Bitcoin (WBTC) or Wrapped Matic (WMATIC) swimming pools on Aave V2 Polygon, stopping assets from being withdrawn from them, in accordance to a Could 19 proposal that makes an attempt to fix the bug by a patch. The proposal says that customers are at present unable to “provide extra of these assets, borrow, repay, or withdraw.”

Though withdrawals are at present not possible, the staff said that funds are “completely protected,” because the bug could be fastened after a governance vote.

The bug solely impacts Aave V2 on Polygon. AaveV3, which is the latest model, stays unaffected, as does V2 deployments to Ethereum or Avalanche.

The damaged code arose due to a Could 16 rate of interest curve patch applied to all deployments of V2. The Polygon implementation of V2 makes use of a barely completely different record of perform definitions (known as an “interface”) for its price technique contracts when put next with the Ethereum and Avalanche implementations. However the rate of interest curve modifications didn’t take note of this distinction, inflicting the bug to develop solely in the Polygon deployment.

The brand new proposal asks Aave’s governing physique, Aave DAO, to approve code modifications to solely the Polygon model to repair the patch. Voting is scheduled to start on Could 20, and can proceed till Could 23, the proposal said.

Associated: Aave DAO votes for ‘rescue plan’ to save lost tokens

Aave is most well-known for its flash mortgage function that permits customers to borrow crypto, make trades, and pay again the loans throughout the similar block with out requiring collateral. It started on Ethereum, however has been increasing into different networks over the previous few years. On April 17, Aave governance voted to deploy the protocol on zkSync Era, a layer 2 of Ethereum that makes use of zero-knowledge proof expertise. On Could 8, Aave V3 deployed to the Metis network, which can be a layer 2 of Ethereum.