Blockchain security firm Blockaid said on Aug. 31 that it detected an exploit affecting More Markets, also referred to as More Labs, on Flow EVM. According to Blockaid, the attacker abused a combination of Ankr’s bonded liquid staking token, or LST, and the protocol’s E-Mode mechanism to empty More Markets’ WFLOW lending reserves. Blockaid’s monitoring found that roughly 15.5 million WFLOW was transferred out of the mFlowWFLOW reserve, with the detected impact valued at about $9.3 million. The security firm also said the related attack transaction cluster included post-exploit fund movements. The exact loss and the destination of the attacker’s funds were still being confirmed at the time of the report.

Blockchain security firm Blockaid said it detected an exploit affecting More Markets, a product tied to More Labs, on Flow EVM. According to Blockaid, the attacker used Ankr’s bonded liquid staking token, or LST, together with the platform’s E-Mode mechanism to drain More Markets’ WFLOW lending reserves. Blockaid said roughly 15.5 million WFLOW was transferred out of the mFlowWFLOW reserve. The firm estimated the detected impact at about $9.3 million. It also said the related cluster of attack transactions included post-exploit fund transfers. The full extent of losses has not yet been confirmed. The destination of the attacker’s funds is also still being verified, based on the information available in the source report.

Aave saw about $27 million in liquidations after a CAPO oracle configuration error mispriced wstETH. Around 34 accounts and more than 10,900 positions were affected. Chaos Labs said impacted users will be fully reimbursed.

AaveLabs has proposed listing Ethena’s USDe on Aave V3’s MegaETH market, with a yield passthrough design that gives depositors returns equivalent to sUSDe and a 50 million token supply cap.

A temporary CAPO oracle misconfiguration on Aave undervalued wstETH by about 2.85%, causing roughly $27 million in liquidations. Aave said no bad debt was created and affected users will be reimbursed.

Aave suffered an abnormal liquidation of ~$27M due to a CAPO parameter misconfiguration that undervalued wstETH by 2.85%, triggering 34 accounts. Chaos Labs and Aave Labs confirmed zero bad debt and promised full compensation.

After KelpDAO’s rsETH LayerZero bridge was attacked, Aave saw about $8.45 billion in withdrawals. Its core functions did not fail, but the incident renewed debate over concentration, liquidity and contagion risks in DeFi lending.

After KelpDAO’s LayerZero bridge was attacked in April 2026, around $292 million in rsETH was stolen and Aave saw roughly $8.45 billion in withdrawals. The protocol’s core functions continued operating, but the episode revived debate over liquidity risk, concentration risk and contagion across interconnected DeFi protocols.