Aave founder Stani Kulechov warns of immutability risks in DeFi

Aave founder Stani Kulechov has a message for DeFi purists who treat unchangeable code as the highest virtue. Sometimes you need a way to hit pause.

Speaking at DAS London on November 11, 2026, Kulechov argued that DeFi lending protocols need circuit breakers. His reasoning: when an oracle fails, the fallout could take years to unwind.

Why oracles keep Kulechov up at night

Lending protocols depend on oracles, the data feeds that tell smart contracts what an asset is worth. If it goes blurry, the protocol starts making decisions based on prices that aren’t real.

On a lending platform, those decisions include liquidations. When a borrower’s collateral appears to fall below a safety threshold, the system sells it automatically to protect lenders.

Kulechov’s warning focused on systems that relied heavily on immutable code with no contingency plan. Immutable code cannot be changed once deployed. That is great for trust, and terrible when something breaks and no one is allowed to fix it.

A circuit breaker borrows from traditional markets, where exchanges halt trading during extreme moves. In DeFi, the concept would let a protocol stop the bleeding while humans figure out what went wrong.

A year of stress tests Aave didn’t schedule

Kulechov is not speaking hypothetically. Aave has lived through several of the scenarios he described in 2026 alone.

On March 10, 2026, a CAPO misconfiguration on Aave led to about $27 million in liquidations across 34 positions. The protocol did not end up with bad debt from the incident.

Then came April. A $292 million exploit of KelpDAO’s LayerZero bridge set off an $8.45 billion deposit run on Aave within 48 hours.

The Aave DAO ultimately required a rescue package of roughly $300 million.

Aave V4 and the push for containment

Kulechov’s comments arrive as Aave works on its fourth version, known as V4. The upgrade is built around a hub-and-spoke architecture with stronger risk controls.

V4 emphasizes modular risk isolation. It also adds the ability to freeze specific collateral lines to prevent contagion from spreading.

Aave’s on-chain lending market has seen over $30 billion in deposits, according to recent updates.

The immutability debate, revisited

Kulechov’s position nudges toward upgradeable code, at least where oracles and liquidations are concerned. His argument is less about abandoning decentralization and more about accepting that failures will happen.

The key distinction in his framing: preventing volatility is not enough. Protocols also need responsive tools that can manage and reverse errors after they occur.

What this means for DeFi lending

There is a trade-off, though. Every circuit breaker is also a lever, and levers need someone to pull them.

That raises governance questions. Who decides when to freeze a market, how quickly, and under what criteria?

The events of 2026 give Kulechov’s argument weight. A misconfiguration wiped out dozens of positions in March, and an outside exploit triggered a multibillion-dollar run in April.