Kam je izginil denar po tej napaki Aave v višini 50 milijonov dolarjev?

Kam je izginil denar po tej napaki Aave v višini 50 milijonov dolarjev?

V tem, kar opisujejo kot eno najbolj uničujočih napak tipa "fat finger" v zgodovini decentraliziranih financ (DeFi), je kripto velikan z eno samo transakcijo 12. marca 2026 dejansko uničil skoraj 50 milijonov dolarjev. Uporabnik je poskušal zamenjati USDT v vrednosti 50,4 milijona dolarjev za AAVE žetone, a je zaradi katastrofalnega pomanjkanja likvidnosti in spregledanih varnostnih opozoril prejel le 324 AAVE, vrednih približno 50.000 dolarjev v tistem času.

The trade, executed through the Aave interface via CoW Swap routing, highlighted the brutal reality of on-chain liquidity dynamics. In a typical liquid market, $50 million would purchase hundreds of thousands of AAVE tokens. However, by dumping such a massive order into a single on-chain path, the trader moved the price curve so aggressively that they paid an average price thousands of times higher than the actual market rate.

Anatomija zdrska (slippage) v višini 50 milijonov dolarjev

The mechanics behind the loss are rooted in the Automated Market Maker (AMM) model used by most decentralized exchanges. Unlike centralized exchanges with order books, DEXs rely on liquidity pools. When a buy order is significantly larger than the available liquidity, the protocol must move further up the price curve to fill the request.

In this instance, the $50.4 million USDT swap exhausted the available AAVE at reasonable prices almost instantly. To fulfill the "signed" parameters of the trade, the routing protocol was forced to buy AAVE at astronomically inflated prices. This resulted in "slippage"—the difference between the expected price of a trade and the price at which the trade is actually executed—of nearly 99.9 %.

Spregledana opozorila in izvedba preko mobilne naprave

According to Aave Labs founder Stani Kulechov, the protocol’s interface functioned exactly as intended. The system identified the massive price impact and triggered a high-level alert. To proceed, the user had to manually acknowledge a warning about "extraordinary slippage" and confirm the risk by clicking a specific checkbox.

Data suggests the transaction was confirmed on a mobile device. Analysts speculate that the user may have been rushing or failed to grasp the magnitude of the warning displayed on a smaller screen. CoW Swap later confirmed that the transaction followed the exact parameters signed by the user, leaving no room for a technical "exploit" defense. This was a pure case of user error in a permissionless environment.

Kam je izginil denar?

The most pressing question for the community is where the lost $50 million actually went. Unlike a hack where funds are moved to a single wallet, this capital was distributed across the Ethereum ecosystem through several channels:

  • MEV Boti: Boti za Maksimalno Izkoristljivo Vrednost (MEV) so bili glavni upravičenci. Poročila kažejo, da so ETH MEV boti si pripisali približno 9,9 milijona dolarjev z uporabo tehnik front-running ali sandwiching transakcije za zajem masivne cenovne razlike.
  • Posredniki likvidnosti (Liquidity Providers): Znatna količina "izgubljenega" USDT ostaja v likvidnostnih skladih, uporabljenih za menjavo. Arbitražni trgovci in ponudniki, ki so imeli AAVE na drugi strani teh skladov, so v bistvu prodali svoje žetone po izjemno visoki premiji.
  • Protokolarne provizije: Transakcija je ustvarila približno 600.000 dolarjev provizij za vpletene protokole. V redkem gestu dobre volje sta se Aave in CoW Swap zavezala, da bosta te specifične zneske provizij vrnila prizadetemu uporabniku.

Debata: Avtonomija uporabnika proti zaščitnim ograjam

The incident has reignited a fierce debate within the DeFi sector regarding the balance between user protection and the "code is law" philosophy. CoW Protocol addressed the blunder on X, stating that while they are reviewing safeguards, "preventing users from making trades removes choice and can lead to terrible outcomes in some situations."

The platform noted that DeFi user experience (UX) is still not where it needs to be to protect users from themselves. While the Aave interface provided a checkbox, the fact that a user could even execute a trade with 99.9% slippage is seen by some as a design flaw that needs addressing through more rigid "hard stops" or mandatory cooling-off periods for trades above certain values.

Trde lekcije za trgovce z visokimi vložki

For crypto traders and those moving large sums of capital, this blunder serves as a grim reminder of the risks associated with on-chain swaps. Experts recommend several "best practices" to avoid similar catastrophes:

  1. Preverite toleranco za zdrs (Slippage Tolerance): Vedno se prepričajte, da so omejitve za drsenje nastavljene na 0,5 % ali 1 %. Če se posla ne more izpolniti v teh mejah, naj ga protokol samodejno prekliče.
  2. Razdelite velika naročila: Zamenjava 50 milijonov dolarjev v enem zamahu je redko učinkovita. Veliki posli naj se razdelijo na manjše "tranše" v teku več ur ali dni, da se omogoči obnova likvidnosti.
  3. Uporabite MEV zaščito: Uporaba "zasebnih" RPC končnih točk ali specifičnih MEV-zaščitenih agregatorjev lahko prepreči, da bi boti med transakcijami z velikim vplivom odtekali vrednost.

While Aave Labs has expressed sympathy and is attempting to contact the user, there is no "undo" button for the $50 million loss. In the world of DeFi, the freedom to be your own bank comes with the absolute responsibility of managing your own safety.