Aave V3.8 adds reentrancy protection for liquidity pools, and has been deployed on 15 V3 markets.

Lending protocol Aave announced that, following approval from Aave DAO, Aave V3.8 developed by Aave Labs has launched on 15 Aave V3 markets. The update adds new security measures to Aave V3 to meet safety standards. Per a governance proposal submitted by Aave Labs, V3.8 is a security-focused, minimally disruptive upgrade that primarily adds reentrancy locks for pool operations during external callbacks. The protection mechanism leverages transient storage (EIP-1153) to maintain accounting consistency when a single transaction interacts with the pool multiple times, while guarding against theoretical reentrancy attacks. Thanks to the use of transient storage, the associated gas overhead remains low. The upgrade covers active Aave instances across 15 blockchains: Ethereum, Plasma, Avalanche, BNB Chain, Monad, Base, Arbitrum, Mantle, X Layer, Polygon, Linea, Optimism, Gnosis, MegaETH, and Celo. Aave Labs clarified that flash loans can still be combined with pool operations such as liquidations in the same transaction, but flash loans cannot be initiated mid-other pool operations. The version passed audits by Certora and third-party firms before moving to on-chain governance voting.