BlockBeats reported on November 12, 2026 that lending protocol Aave had, with Aave DAO approval, deployed Aave V3.8 on 15 Aave V3 markets. Aave Labs developed the release. The report describes it as adding protections so the pools meet security standards.
What the proposal says changed
In the governance proposal Aave Labs submitted, V3.8 is a security-focused upgrade with a narrow set of changes. The main addition is a reentrancy lock on pool operations during external callbacks.
That lock uses transient storage (EIP-1153). As relayed from the proposal, it is meant to keep accounting consistent when one transaction interacts with a pool more than once, and to guard against theoretical reentrancy attacks. Because the design uses transient storage, the related gas overhead is described as low. The report gives no gas figures.
Markets covered
The upgrade covers active instances on Ethereum, Plasma, Avalanche, BNB Chain, Monad, Base, Arbitrum, Mantle, X Layer, Polygon, Linea, Optimism, Gnosis, MegaETH, and Celo.
Flash loans: what still composes
Aave Labs says a flash loan can still be combined in the same transaction with a liquidation or other pool operation. A flash loan cannot be started while other pool operations are already in progress. That is a sequencing limit inside a transaction, not a stated ban on using flash loans together with liquidations.
What this report does and does not establish
The same account says the version passed Certora and third-party audits before it entered the on-chain governance vote. The flash does not name those third parties, quote findings, or describe audit scope. Market coverage, the lock’s purpose, and the flash-loan rule are attributed to Aave’s announcement and to Aave Labs’ proposal. This source does not include an independent measurement of gas, a reproduction of the lock, or residual-risk findings.
Original report: BlockBeats, November 12, 2026, 00:34 UTC+8
