Aave Labs proposed on October 21, 2026, a V3.8 upgrade designed to protect Pool accounting from reentrancy during external calls. The mechanism relies on the EIP-1153 standard and transient storage, whose data is erased at the end of each transaction, to limit gas costs. This minor release would cover 16 active Aave V3 instances, including deployments on Ethereum, Avalanche, BNB and Polygon, without changing the protocol’s main lending and borrowing features. No deployment has taken place, and no exploit prompted the proposal: the upgrade still requires security audits, governance review and an AIP vote. Integrations that rely on callbacks into the Pool will also need to confirm that the protection does not block legitimate multi-step transactions.
Source: Read the original article
