BlockBeats reported at 00:34 on 12 November 2026 (UTC+8) that lending protocol Aave had taken Aave V3.8 live on 15 Aave V3 markets after Aave DAO approval. Aave Labs developed the release. The notice says the version adds protective measures for Aave V3 so that it meets security standards. It does not name those standards.
What the reported proposal changes
According to the governance proposal submitted by Aave Labs, as summarized by BlockBeats, V3.8 is a security-focused upgrade with restrained changes. The main addition is a reentrancy lock on pool operations during external callbacks.
The protection uses transient storage (EIP-1153). In that account, the lock keeps accounting consistent when a single transaction interacts with a pool more than once, and it is intended to guard against theoretical reentrancy attacks. The same account says the related gas overhead is low because the mechanism uses transient storage. The notice does not include a contract diff, the exact lock scope, or any measured gas figures.
Markets covered
The upgrade covers active instances on Ethereum, Plasma, Avalanche, BNB Chain, Monad, Base, Arbitrum, Mantle, X Layer, Polygon, Linea, Optimism, Gnosis, MegaETH, and Celo.
Flash loans, as Aave Labs describes them
Aave Labs says flash loans can still be combined in the same transaction with pool operations such as liquidations. A flash loan cannot be initiated while other pool operations are in progress. The notice does not describe call order, revert conditions, or how integrators should sequence callbacks.
Audits
BlockBeats reports that the version passed Certora and third-party audits before it entered the on-chain governance vote. The notice does not name the other auditors, link the reports, or state the scope of those reviews.
Original report: BlockBeats, 12 November 2026.
