Aave Releases Post Mortem Of $50M Swap Loss

The report provides the first detailed technical account of how the Aave post-mortem $50M swap unfolded. It also corrects the fee figure that circulated after the initial coverage: Aave collected $110,368 in interface fees, significantly less than the $600,000 rough estimate published on March 12. Both amounts will be held and returned to the user if they come forward for verification.

What the Post-Mortem Reveals

On March 12, a user attempted to swap 50,432,688 aEthUSDT for aEthAAVE through the CoW Swap widget integrated into aave.com. The order was far too large for the available AAVE liquidity across any routed pools.

The result: the user received 327.2413 aEthAAVE, worth approximately $36,425. That is a 99.9% loss on a $50.4 million transaction.

Aave’s post-mortem makes clear that the Aave Protocol itself was never at risk. The swap executed entirely outside of Aave’s core lending and borrowing contracts, through CoW Swap, a third-party decentralized exchange aggregator integrated as a frontend widget on aave.com.

Price Impact vs. Slippage: A Critical Distinction

Aave engineer Marc Grabowski clarified that this incident was not a slippage failure in the conventional sense. The user set a slippage tolerance of 1.21%. That was not the problem.

The problem was the accepted quote itself. Before the swap executed, the quoted output already reflected a 99.9% price impact. The market simply could not absorb a $50 million AAVE buy at anything close to market rate.

Price impact occurs when a trade is so large relative to available liquidity that it moves the price against the buyer as it executes. Slippage tolerance, by contrast, controls how much the final execution can deviate from the quoted price. Here, the quote was already catastrophic before a single token moved.

CoW Swap published its own post-mortem with a technical explanation of why the solver quoted such an extreme rate. The Aave post-mortem references this document directly.

How the Swap Executed On-Chain

According to EigenPhi transaction data, the CoW Swap solver redeemed the user’s 50,432,688 aEthUSDT by burning it and withdrawing raw USDT from Aave V3.

It then routed that USDT into UniswapV3’s USDT/WETH pool, receiving 17,957.81 WETH worth $37.3 million. From there, the solver moved the WETH into SushiSwap’s AAVE/WETH pool, purchasing just 331.3 AAVE tokens worth $36,930.

Those AAVE tokens were deposited back into Aave V3 to mint aEthAAVE. The solver sent 327.2413 aEthAAVE to the user and kept 4.064 aEthAAVE (worth $452) as surplus. The CoW Protocol’s GPv2Settlement contract closed the trade with no residual balance.

Src: Aave X Article

The Warning the User Accepted

Aave’s post-mortem confirms that the interface displayed a prominent warning before the swap could execute: “High price impact (99.9%). This route may return less due to low liquidity or small order size.”

The swap button remained greyed out until the user manually checked a confirmation box reading: “I confirm the swap with a potential 100% value loss.”

An internal audit trail cited in the post-mortem confirms the user, on a mobile device, manually clicked that checkbox and proceeded. Aave founder Stani Kulechov had stated as much on X on March 13.

As of the post-mortem’s publication date, the affected user has not contacted Aave.

Aave Corrects the Fee Estimate

Earlier coverage, including statements attributed to Kulechov on March 12, put the fee at approximately $600,000. The post-mortem revises this figure down to $110,368, calculated at a 25 basis point rate and verifiable through CoW Swap’s metadata.

Aave says it will hold these funds and return them to the user upon successful verification. The process requires the user to contact Aave directly.

Aave Shield: The New Guardrail

In response to the incident, Aave is deploying a new feature called Aave Shield for the swap widget on aave.com.

By default, Aave Shield will block any swap with a price impact greater than 25%. Users who want to proceed with a high-impact trade must manually navigate to the Settings menu and disable the protection. This creates deliberate friction for extreme orders while preserving permissionless access for advanced users.

Aave’s post-mortem frames this as a balance between user protection and the permissionless principles that define DeFi. In emergency market conditions, users sometimes need to execute swaps regardless of price impact. Aave Shield does not remove that ability, but it makes it significantly harder to do accidentally.

A Pattern the Industry Keeps Repeating

This incident joins a growing list of multi-million-dollar losses tied to oversized DeFi trades. A 2025 Uniswap trade lost roughly $714,000 to the same dynamic. A Cardano DEX swap in 2025 cost a user approximately $6 million.

The pattern is consistent: large orders routed through liquidity pools overwhelm available supply, collapsing the execution price. Frontends show warnings. Users confirm anyway. The protocol executes exactly as instructed, and the loss is final.

Aave’s Aave Shield addresses the user interface side of this problem. Whether the broader DeFi industry follows with similar guardrails is an open question. This is not financial advice.