Aave V3.8 Adds Reentrancy Protection to Pools, Now Live on 15 V3 Markets

Aave V3.8—developed by Aave Labs—has been officially deployed across all 15 Aave V3 markets as of November 12, following approval by Aave DAO governance. This lightweight upgrade prioritizes security enhancements, with its core change introducing a reentrancy lock mechanism for pool operations in external callback scenarios. The mechanism leverages transient storage—as defined in EIP-1153—to ensure ledger-state consistency during multiple pool calls within a single transaction and to mitigate potential reentrancy attacks. Because it uses transient storage, gas costs are significantly reduced. The upgrade applies to all active Aave V3 instances on Ethereum, Polygon, Avalanche, BNB Chain, Arbitrum, Optimism, Base, Linea, Mantle, X Layer, Gnosis, Plasma, Monad, MegaETH, and Celo. While flash loans remain permitted alongside other pool operations—such as liquidations—in the same transaction, initiating new flash loans mid-execution of other pool operations is now prohibited. Prior to on-chain governance voting, V3.8 underwent comprehensive security audits by Certora and multiple third-party firms.