Aave V3.8 launched in 15 markets after DAO approval
Lending protocol Aave announced on November 11, 2026, that Aave V3.8, developed by Aave Labs, has been launched in 15 Aave V3 markets after approval by the Aave DAO. This version adds new protections to Aave V3 to align with industry best practices and Aave DAO security standards.
According to the governance proposal submitted by Aave Labs, V3.8 is a security-focused upgrade with restrained changes, mainly adding a reentrancy lock for pool operations during external callbacks. This protection is based on transient storage (EIP-1153) and is used to maintain accounting consistency when a single transaction interacts with the pool multiple times, while guarding against theoretical reentrancy attacks; because it uses transient storage, the related gas overhead is low. The upgrade covers active instances on Ethereum, Plasma, Avalanche, BNB Chain, Monad, Base, Arbitrum, Mantle, X Layer, Polygon, Linea, Optimism, Gnosis, MegaETH, and Celo.
Aave Labs explained during the proposal discussion that flash loans can still be combined with pool operations such as liquidations within the same transaction, but flash loans cannot be initiated again while other pool operations are in progress. Before entering an on-chain governance vote, this version had already passed Certora and third-party audits.
Original source:
Title: [ARFC] Aave V3.8
Publisher: Aave Labs (Aave governance forum)
Publication date: 2026-10-21
URL: governance.aave.com/t/arfc-aave-v3-8/25891
Source type: official document
Verification status: full text actually read on 2026-11-11
Supporting content: V3.8 security upgrade details (reentrancy lock based on EIP-1153), the 15 market instances covered, flash loan compatibility explanation, audit arrangements, and more
ABAB AI Insight
Aave Labs, as a core development contributor to the protocol, submitted this proposal, and it was implemented after Aave DAO approved it through the governance process. Founder Stani Kulechov has previously emphasized protocol security as a priority many times, and this upgrade continues that path; it was not triggered by an external security incident.
V3.8 uses EIP-1153 transient storage to implement reentrancy protection. This mechanism became available after Ethereum's Dencun upgrade, so the lock state exists only during a single transaction, avoiding the high gas cost of writing to persistent storage. Historical DeFi reentrancy events, such as early The DAO and some lending protocol cases, mostly occurred when external callbacks had not yet completed accounting. This targeted hardening improves accounting consistency while preserving the atomic combination capability of flash loans and liquidations, so as not to disrupt existing integration paths.
Compared with reentrancy protection upgrades at other lending protocols around 2023, such as Compound, Aave's change is more restrained. It does not restructure the pool architecture and only adds a lock layer; the difference is that transient storage is used to keep the marginal cost extremely low, making it suitable for high-volume markets. Reporting by Bankless and others noted that the proposal passed in governance without any opposing votes.
For Aave, this upgrade improves the pool's resilience to theoretical reentrancy risks without changing the user interface, lowering the probability of abnormal liquidations or fund divergence caused by potential accounting inconsistencies. Observed metrics include post-upgrade success rates and gas cost changes for flash loan plus liquidation combinations across each market, and whether existing integrators continue to use the protocol.
ABAB News · Cognitive Law
Using EIP-1153 transient storage, Aave adds a reentrancy lock to the pool at low gas cost without interrupting the flash loan liquidation path.
A security upgrade not triggered by any known vulnerability passed through DAO governance and covers 15 market instances.
Restrained changes take priority over architectural reconstruction, making the protection an increment to the existing protocol rather than a replacement.