I just found out that the proxy is created at DefaultLoadEventListener.createProxyIfNecessary() where it IMO should consult the 2L cache first by calling existing = loadFromSecondLevelCache( event, persister, keyToLoad );. The fix looks easy, but I am not sure of the implications.