Aave V3.8 security upgrade now live on 15 V3 markets
BIBIBI
AT A GLANCE
Aave V3.8 has been launched on 15 Aave V3 markets, adding reentrancy protection to pool operations.
Article
Aave V3.8 adds reentrancy protection to pools, now live on 15 V3 markets
BlockBeats news, November 12: Lending protocol Aave announced that Aave V3.8, developed by Aave Labs and approved by the Aave DAO, has been launched on 15 Aave V3 markets. This version introduces new protective measures for Aave V3 to comply with security standards.
According to the governance proposal submitted by Aave Labs, V3.8 is a security-focused, restrained upgrade that primarily adds reentrancy locks to pool operations during external callbacks. This protection is based on transient storage (EIP-1153), used to maintain accounting consistency when interacting with the pool multiple times within a single transaction and to prevent theoretical reentrancy attacks. Due to the use of transient storage, the associated gas overhead is low. The upgrade covers active instances on Ethereum, Plasma, Avalanche, BNB Chain, Monad, Base, Arbitrum, Mantle, X Layer, Polygon, Linea, Optimism, Gnosis, MegaETH, and Celo.
Aave Labs stated that flash loans can still be combined with pool operations such as liquidations in the same transaction, but flash loans cannot be initiated while other pool operations are in progress. This version passed audits by Certora and third parties before entering on-chain governance voting.
Original link https://m.theblockbeats.info/flash/376839
Key points
01
Aave announced that Aave V3.8 has been launched on 15 Aave V3 markets following approval by the Aave DAO.
02
The governance proposal submitted by Aave Labs describes V3.8 as a security-focused, restrained upgrade.
03
The upgrade adds reentrancy locks to pool operations during external callbacks, with protection based on transient storage (EIP-1153).
04
The material states that this mechanism is used to maintain accounting consistency when interacting with the pool multiple times within a single transaction and to prevent theoretical reentrancy attacks; due to the use of transient storage, the associated gas overhead is low.
05
The upgrade covers active instances on Ethereum, Plasma, Avalanche, BNB Chain, Monad, Base, Arbitrum, Mantle, X Layer, Polygon, Linea, Optimism, Gnosis, MegaETH, and Celo.
06
Aave Labs stated that flash loans can still be combined with pool operations such as liquidations in the same transaction, but flash loans cannot be initiated while other pool operations are in progress.
07
This version passed audits by Certora and third parties before entering on-chain governance voting.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
Reentrancy protection is a measure restricting pool operations from being called again during execution. The report states that Aave V3.8 uses EIP-1153 transient storage to implement this protection and has deployed it to 15 markets.
Why it matters to readers
This upgrade targets operations during external callbacks of pools, aiming to maintain accounting consistency across multiple interactions within the same transaction and to prevent theoretical reentrancy attacks. The report also explains restrictions on flash loan combination operations.
For people using Aave, the upgrade involves pool security mechanisms and flash loan operation rules; the report does not state what actions ordinary users need to take.
Risks and unknowns
The material does not provide independently verifiable deployment records or audit report contents.
The report mentions preventing theoretical reentrancy attacks but does not specify which concrete attack scenarios this measure covers, nor can it be concluded that no other vulnerabilities exist based on this.
The material does not provide post-upgrade security incidents or feedback on flash loan compatibility.
The financial analysis in the context mentions the report date as November 12, while the publication time is 2026-11-11; the material does not explain the discrepancy between these dates.
Related Developments
Loading event timeline…
Related concepts
Reentrancy attack: Calling related operations again before an operation is completed; here it can only be understood based on the report as a theoretical risk the upgrade attempts to prevent.
This term is not in the glossary yet. Browse related concepts in the glossary.
View glossary →Transient storage (EIP-1153): The mechanism upon which the reentrancy protection described in the report is based.
This term is not in the glossary yet. Browse related concepts in the glossary.
