Aave was not hacked, but users experienced restrictions after a Binance-linked attacker exploited the platform. The attacker borrowed funds before emergency controls were activated. These emergency measures halted new deposits, caused lenders to withdraw assets, and increased borrowing costs.
This incident has reignited debates on emergency safeguards and how much disruption they should inflict on normal users to protect the platform.
While the emergency controls protected Aave from greater damage, the user impact highlighted the challenge of balancing security and usability in decentralized finance.