$120M in Aave Reserves Is Still Frozen — And a Linux Kernel Bug Is Why

A critical Linux kernel vulnerability quietly forced Threshold Network to shut down its tBTC bridge on October 30, leaving $120 million in Aave reserves completely frozen while most of crypto Twitter was looking elsewhere.

The bridge has now partially resumed. But the word partially is doing a lot of heavy lifting here, and DeFi holders with exposure to tBTC-backed positions need to understand exactly what that means before assuming all is clear.

What Actually Happened

Threshold Network operators discovered a severe Linux kernel vulnerability capable of letting attackers execute arbitrary code on unpatched servers. The kind of exploit that, if it landed in the wrong hands at the wrong moment, could have put the entire tBTC bridge infrastructure at risk.

The team moved fast. They halted the bridge entirely on October 30 to patch affected systems before resuming any operations. That decision was the right call. But the downstream consequence was immediate and painful: $120 million sitting in Aave reserves tied to tBTC got frozen in place, with no exit available.

Why This Is Bigger Than a Routine Maintenance Window

This is not a standard upgrade. The tBTC bridge is one of the most significant trust-minimized pathways for bringing Bitcoin liquidity into DeFi. When it goes down, it does not just inconvenience a handful of power users. It freezes capital at scale inside protocols like Aave that depend on the bridge functioning continuously.

The fact that a Linux kernel vulnerability, something completely external to the crypto stack itself, could paralyze $120 million in DeFi capital is a sobering reminder of how much Web3 infrastructure still runs on traditional Web2 server architecture. Decentralized at the protocol layer. Centralized at the hardware layer. That tension never fully goes away.

Partial Resumption: What It Means in Practice

The bridge is back, but not fully. Threshold has not confirmed a complete return to normal operations, which means liquidity flows remain constrained. Users waiting to move BTC in or out of the tBTC ecosystem should expect friction, delays, and potentially limited capacity until full resumption is confirmed on-chain.

The $120M Aave reserve freeze is the number to watch. Until that capital is fully unlocked and liquid again, there is residual systemic risk sitting inside one of DeFi's largest lending protocols.

What Holders Should Watch Right Now

If you hold tBTC, have open positions on Aave tied to tBTC collateral, or are planning any BTC-to-DeFi moves in the near term, do not assume the green light is fully on. Monitor Threshold's official channels for a full bridge resumption announcement. Watch Aave governance for any emergency updates on the frozen reserves. And treat any yield opportunity involving tBTC as carrying elevated operational risk until the dust completely settles.