Bug in Aave V2 Polygon causes some assets to become stuck in contracts

1 year ago

The bug lone affects the Polygon implementation, and V3 is unaffected

Bug successful  Aave V2 Polygon causes immoderate   assets to go  stuck successful  contracts

A bug successful an older mentation of crypto lending protocol Aave is blocking users from interacting with Wrapped Ether (WETH), Tether (USDT), Wrapped Bitcoin (WBTC) oregon Wrapped Matic (WMATIC) pools connected Aave V2 Polygon, preventing assets from being withdrawn from them, according to a May 19 connection that attempts to fix the bug done a patch. The connection says that users are presently incapable to "supply much of those assets, borrow, repay, oregon withdraw."

Although withdrawals are presently impossible, the squad stated that funds are "perfectly safe," arsenic the bug tin beryllium fixed aft a governance vote.

.@AaveAave the latest upgrade of ReserveInterestRateStrategy successful Aave V2 (Polygon) has caused a impermanent halt of the protocol, impacting assets worthy ~$110M!
The basal origin is the caller ReserveInterestRateStrategy is lone compatible with Ethereum, not compatible with Polygon. https://t.co/kg5696QNPo pic.twitter.com/Ze3zSBS8Ck

— BlockSec (@BlockSecTeam) May 19, 2023

The bug lone affects Aave V2 connected Polygon. AaveV3, which is the astir caller version, remains unaffected, arsenic does V2 deployments to Ethereum oregon Avalanche.

The breached codification arose due to the fact that of a May 16 involvement complaint curve spot applied to each deployments of V2. The Polygon implementation of V2 uses a somewhat antithetic database of relation definitions (called an “interface”) for its complaint strategy contracts erstwhile compared with the Ethereum and Avalanche implementations. But the involvement complaint curve changes did not instrumentality into relationship this difference, causing the bug to make lone successful the Polygon deployment.

The caller connection asks Aave’s governing body, Aave DAO, to o.k. codification changes to lone the Polygon mentation to hole the patch. Voting is scheduled to statesman connected May 20, and volition proceed until May 23, the connection stated.

Related: Aave DAO votes for ‘rescue plan’ to prevention mislaid tokens

Aave is astir good known for its flash indebtedness diagnostic that allows users to get crypto, marque trades, and wage backmost the loans wrong the aforesaid artifact without requiring collateral. It began connected Ethereum, but has been expanding into different networks implicit the past fewer years. On April 17, Aave governance voted to deploy the protocol connected zkSync Era, a furniture 2 of Ethereum that uses zero-knowledge impervious technology. On May 8, Aave V3 deployed to the Metis network, which is besides a furniture 2 of Ethereum.

View source