⚠️ Urgent — Wrongful Liquidation + Unauthorized Fund Withdrawal on AAVE (Polygon)

Risk
1

Hello AAVE team and community,

I’m here to report a serious issue that occurred with my position on AAVE Polygon, which I believe is a case of completely wrongful liquidation with critical operational errors.

:check_mark: My position had approximately 1,700 POL as collateral, with only 180 USDT borrowed, a very healthy and safe ratio at that time. A few days before the liquidation, I even added 300 more POL to strengthen my collateral position.

:stop_sign: However, I was shocked by a full liquidation, even though AAVE is designed to execute partial liquidations (typically 50% to 70%), never 100% at once unless under extreme conditions — which was not the case here.

:police_car_light: To make things worse, the liquidation was executed at an incorrect price, significantly below the market price of POL at the time.

On top of that, after the liquidation of 869 POL,in the value of US200.00,
there was a second unexplained withdrawal of 583.81 POL, recorded on-chain as a Withdraw ETH to the address 0xBC302053db3aA514A3c86B9221082f162B91ad63 (transaction hash: 0xff780ec3612784703ee64e371557adcc48a0b9d3d03ef8b694f29a7062b84ff6).

:magnifying_glass_tilted_left: The sum of this liquidation + this unexplained withdrawal + the remaining balance in my AAVE account (244 POL) equals exactly the 1,700 POL I originally had, clearly indicating that 100% of my funds were drained.

:brain: My request is:

  1. An urgent audit of how this liquidation was executed, including oracle price verification at that time.
  2. An explanation for the 583 POL withdrawal, which was not initiated by me.
  3. A refund or compensation for the funds, if this is confirmed as a protocol error.

:link: Evidence links:

:white_check_mark: I’m ready to provide all necessary materials, including transaction history, screenshots, and detailed analysis.

Thank you for your attention — this is a serious case that requires urgent handling.

carteira aave
carteira aave1462×768 104 KB

deshboard aave
deshboard aave1462×768 135 KB

transaçao desconhecida
transaçao desconhecida1318×432 85.5 KB

2

AAVE can’t know why a withdrawal was made that put you so close to the liquidation threshold.

maybe your device was compromised, maybe you did it by accident.

either way that withdrawal is why you got liquidated

it looks like you still have collateral left over. on platforms that do full liquidations you might not have that.

i suggest looking into the transaction that withdrew the 583.8 aPOL. Which address does it say sent that transaction?

actually i looked at it myself and it was your own wallet that made the withdrawal.

so again we’re back to either your device was compromised, or you withdrew too much out of ignorance or accident

but i’m probably wasting my time since this post looks like it was written by chatgpt and there could be malevolent forces at work here

3

Hello,

I’ve reviewed the details of your case and the transactions in question.

  • The liquidation transaction does show up on the Aave UI, but the function called is King of BSC on contract 0xe4E9cA39a9CB87871E12B34C2bb251dd7e4c787f, which is not an official Aave protocol contract.
  • This contract does not contain the liquidationCall() function used for standard Aave liquidations, and does not appear to be associated with the Aave protocol.
  • The liquidation price for POL was accurate at the time (POL was trading at $0.22).
  • You had about $247 in total collateral at the time of liquidation, and approximately $180 (about 72%) was used to cover the debt.
  • Additionally, a withdrawETH function sent nearly 600 POL worth of collateral to an external wallet, 0xBC302053db3aA514A3c86B9221082f162B91ad63, not claimed as your own.

Conclusion:
It appears you interacted with a phishing scheme. The scammer gained control of your wallet, withdrew as much collateral as possible, and your remaining position was then liquidated. This was not due to a flaw in the Aave protocol, but rather unauthorized wallet access as a result of the phishing incident.

If you would like a deeper conversation or need further clarification, please feel free to reach out on the Aave Discord. The forums are best suited for governance-related discussions, so Discord is the preferred place for more direct support. Here is the invite link: Aave Community

4 Likes
4

I assume all needed information were given and that the result of the liquidation was the withdrawal which was caused by a phishing scam likely. For further support go to the Aave discord, don’t answer any DM and don’t click any links.

1 Like