Aave froze deposits and borrowing on nearly 300 markets after a wallet linked to the Binance attacker borrowed about $44 million of ether against stablecoins. On Solana, Jupiter Lend reported a "liquidity crunch" delaying withdrawals.
The Binance breach did not stay on Binance.
Aave, the decentralized lending protocol, froze new deposits and borrowing on 175 reserves across 16 networks on its V3 markets and on 117 reserves in V4 after a wallet in the attacker's cluster posted about $60 million of USDT as collateral and borrowed 19,762 wrapped ether, a debt of about $44 million, according to LlamaRisk, Aave's risk manager. The position remains overcollateralized, and Aave said its smart contracts were not affected. A market for tokenized real-world assets was left open.
The side effect
The freeze stopped the attacker from borrowing more. It also changed conditions for everyone else. With new deposits halted, suppliers pulling funds pushed some reserves to 92% to 100% utilization, the point at which there is little or nothing left to withdraw. Users could not add collateral to defend positions while markets were frozen.
Before reopening, LlamaRisk moved to cut borrowing caps to about 2% above pre-incident levels, removing about $3.7 billion of unused borrowing capacity on V3 and $130 million on V4.
Solana lenders
On Solana, Jupiter Lend said Friday that "there is currently a liquidity crunch impacting withdrawals," adding that the protocol was functioning as expected and all funds were safe. Its public data early Friday showed only about 7,900 USDC immediately withdrawable against about $420 million supplied. Kamino paused new borrowing in a SOL and bitcoin market late Thursday. Both Solana protocols said they had no exposure to Binance.
Did the system work?
One reading is that it did: the protocols lost nothing, the attacker was blocked from extracting more, and risk managers acted within hours.
Another is that the episode exposed a liquidity channel that yield investors rarely price. A breach at a centralized exchange produced queued withdrawals at lenders with no connection to it.
A third concerns governance. A small number of guardian accounts froze hundreds of markets in a matter of hours, a power that protected users this time and that users depend on being used carefully.
What to watch
Aave's full reopening and new caps, Jupiter Lend's withdrawal liquidity, and whether lending markets normalize once Binance reopens withdrawals.