HypurrFi discloses an "Rounding Error" vulnerability in the early version of Aave V3, and has suspended new lending in the XAUT0 and UBTC markets.

CoinNetwork · 2026-03-06T04:44:52+00:00

HyperEVM's trustless lending protocol HypurrFi posted a message on the X platform that before Aave V3 3.5, a "rounding error" vulnerability was found, allowing attackers to extract underlying tokens. For user safety, related market supply and lending operations have been suspended, while withdrawal and repayment functions are normal. We are working with security researchers to address the issue.

CoinNetwork

2026-03-06 04:44:52

Abstract generation in progress

CryptoWorld.com, March 6 — HyperEVM’s native non-custodial lending protocol HypurrFi announced on X that versions of Aave V3 before 3.5 contain a “rounding error” vulnerability. Under certain conditions, attackers can repeatedly perform supply/withdraw and borrow/repay cycles to extract underlying tokens. The affected markets are XAUT0 and UBTC within HypurrFi Pooled. Currently, user funds are not at risk. To ensure safety, related markets have paused new supply and borrowing operations. Withdrawal and repayment functions remain operational, and other markets are functioning normally. HypurrFi added that the issue was quickly detected on-chain through internal monitoring systems, and affected markets have been frozen. They are collaborating with other Aave deployers and security researchers to address the problem and have invited other Aave fork projects to contact them for more security information.

AAVE1.54%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.