# Aave V3.8 Goes Live With New Reentrancy Guard

*Author: William M. Peaster*
*Published: Nov 11, 2026*
*Source: https://www.bankless.com/read/news/aave-v3-8-goes-live-with-new-reentrancy-guard*

---

Aave's flagship lending markets got a security tune-up on Nov. 11th. The protocol [announced](https://x.com/aave/status/2120551898902077622) that V3.8, a narrow hardening release built by Aave Labs, is now running across 15 networks after sailing through governance without a single opposing vote. 

> [ — (@)
> ](https://twitter.com/aave/status/2120551898902077622)

# **What's the Scoop?**

- **The guard:** V3.8's lone change is a pool-wide lock against reentrancy, the class of attack where a contract gets called again before it finishes updating its books. Aave Labs' [proposal](https://governance.aave.com/t/arfc-aave-v3-8/25891) describes the risk as "theoretical," and no known exploit prompted the patch. 

- **Cheap by design:** The lock lives in transient storage (EIP-1153), the scratchpad from Ethereum's Dencun upgrade that wipes itself after every transaction. That makes a blanket guard nearly free in gas, which was the old objection to adding one. 

- **Nothing breaks:** Flash loan functions read the lock without setting it, so liquidations fired from inside a flash loan still go through. Founder Stani Kulechov [said](https://x.com/StaniKulechov/status/2120554959951610128) users and integrators don't need to do anything. 

- **Zero dissent:** The Snapshot poll drew roughly 381K AAVE in favor and none against, and the onchain vote (AIP 541) repeated the shutout with about 371.6K AAVE. Audit reports from Certora and ChainSecurity are filed alongside the code. 

- **New steward:** BGD Labs, which led earlier V3.x releases, left the DAO in April over centralization concerns. Aave Labs took over V3 upkeep afterward, and this release carries its name.
---

*This article is brought to you by [NEAR](https://www.bankless.com/sponsor/near-1785257427?ref=read/news/aave-v3-8-goes-live-with-new-reentrancy-guard)*