What Is Aave? The Pioneer of Decentralized Lending, From Pools to Flash Loans

During the summer of 2020 that everyone now calls “DeFi Summer,” Aave’s TVL briefly crossed $20 billion, turning “decentralized lending” from an academic phrase into a product hundreds of thousands of wallets used daily. It pulled off something that sounds impossible — letting strangers lend to each other without trust.

(/uploads/20260529/1780064035448-25554.png)

Lending pools: separating “borrow” and “lend”

Traditional lending needs a bank in the middle: depositors save, banks underwrite borrowers, contracts get signed. Aave splits the action into two operations against a pool:

• Depositors put tokens into a “lending pool” and instantly receive aTokens as receipts that accrue interest at the pool rate.
• Borrowers post one asset as collateral and borrow another at a floating rate.

Nobody needs to know the other side. The pool becomes the universal counterparty. Rates aren’t negotiated — they’re computed from pool utilization: the higher the utilization, the higher the rate, which attracts more deposits and discourages new loans.

The essence: lending is abstracted into a liquidity problem, not a credit problem. Aave doesn’t care who you are; it cares how much you posted.

Collateral and liquidation

If Aave doesn’t underwrite credit, how does it prevent default? With overcollateralization — you must post collateral worth more than what you borrow.

Each asset has two key parameters:

• LTV (loan-to-value): the max fraction of your collateral you can borrow. ETH’s LTV is typically 70-80%, so $1,000 of ETH collateral lets you borrow $700-800.
• Liquidation threshold: once your debt-to-collateral ratio crosses this number (e.g. 82.5%), anyone can trigger a liquidation, buying your collateral at a discount to repay your debt.

Example: collateralize 1 ETH (at $3,000) and borrow 2,000 USDC at 80% LTV. If ETH drops to $2,500, your health factor enters the danger zone and a liquidator shows up. This is why in DeFi lending the health factor matters more than APY.

Flash loans: a DeFi-native primitive

Flash loans are Aave’s most original invention: borrow, use, and repay inside a single transaction, with no collateral at all.

This sounds insane financially, but it works on Ethereum because the operation is atomic — either every step from borrow to repay succeeds, or the whole transaction reverts and the funds never moved. A borrower simply cannot fail to repay.

Real uses:

• Arbitrage: instant price arb between Uniswap and other DEXes.
• Collateral swap: flip ETH collateral to stETH without selling.
• Liquidations: borrow capital to liquidate underwater positions and pocket the bonus.
• Refinancing: shift a loan to a cheaper protocol.

Flash loans cut both ways. Many large hacks used flash loans as starting capital — attackers grabbed tens of millions for free, manipulated a thin oracle or buggy contract, and completed the attack inside one transaction. This is a contract-risk problem rather than an Aave-protocol problem, but it pushed the accessible blast radius of bugs to a new level.

(/uploads/20260529/1780064071946-32687.png)

AAVE token and the GHO stablecoin

AAVE is the governance token. Holders vote on parameters. AAVE can also be staked into the Safety Module as a final backstop — in a serious incident, staked AAVE gets partially slashed to plug the hole. In other words, AAVE stakers are the protocol’s ultimate risk absorbers, compensated by a share of protocol revenue.

In 2023 Aave launched its native stablecoin GHO: users mint GHO against collateral, similar to DAI, but with peg logic and rates fully controlled by Aave governance. This extends the “lending protocol” boundary into stablecoin issuance.

Three risks you can’t ignore

Aave is the de facto lending standard, but it stacks nearly every core DeFi risk:

1. Oracle risk: liquidations depend on external price feeds. A manipulated or stale oracle means rightful liquidations don’t happen and wrongful ones do.
2. Smart-contract risk: Aave itself is audited many times over, but the second-layer products built on top might not be.
3. Rate-spike risk: utilization can surge in hours and borrow rates can leap from single digits to dozens or even hundreds. Strategies built on borrowed funds get squeezed out at exactly the wrong moment.

If you use stETH as collateral, factor in depeg risk too — see the liquid staking primer.

FAQ

• Can I withdraw deposits anytime? Usually yes, but in extreme conditions utilization can hit 100% and you wait for repayments or new deposits.
• Does liquidation take all my collateral? No. The liquidator only buys enough to cover the debt and the discount; the rest stays in your account.
• Do flash loans require credentials? No, only the ability to write a contract — they’re an open financial primitive.
• How is Aave different from a bank? Banks underwrite credit; Aave only checks collateral. Banks need intermediaries; Aave’s code is the intermediary.

Key takeaways

• Aave splits lending into two pool operations and prices with rates instead of negotiation.
• Overcollateralization plus liquidation thresholds is the trustless safeguard; health factor matters more than APY.
• Flash loans are a DeFi-native primitive used for arb, liquidation and refinancing — and a favorite tool for attackers.
• AAVE governs and backstops via the Safety Module; GHO is the protocol’s native stablecoin.
• Oracle, contract and rate-spike risks are the three you can’t ignore.

Letting code be the risk officer

Banks lend because they have underwriting desks, risk teams and regulatory backstops. Aave can lend because it translates all those roles into code — collateral ratios for credit, liquidations for collections, rate models for loan officers. The translation isn’t perfect: oracles, contracts and rate spikes are old problems facing new actors. But once code rather than a bank plays risk officer, the shape of finance is already rewritten. This article is not investment advice.