Lending security

Aave reports V3.8 live across 15 markets

The security release adds a transient-storage guard; integrators should distinguish supported flash-loan composition from blocked nested entry.

ETH Canal ·

Engraved canal pump with an interlocking safety mechanism.

Aave announced on November 11 that V3.8 is live across 15 Aave V3 markets following DAO approval. The release strengthens existing lending infrastructure rather than introducing a new asset or yield product.

Aave Labs’ governance explanation identifies a reentrancy guard based on transient storage under EIP-1153. It protects Pool accounting during external callbacks. The contributor clarified that a flash-loan callback can still perform other Pool actions, including liquidation; initiating a flash loan inside an already-running Pool action is the blocked pattern.

That distinction matters for bots and contracts combining several lending operations in a transaction. Integration reviews should exercise the exact call sequence rather than assume every callback is prohibited. The separate discussion of dynamic borrowing limits should not be read as part of this deployment announcement.