Aave
Mixed evidence Evidence 84%
Key facts
Why
Bloomberg LEI record: AAVE LABS LTD., Cayman Islands (c/o Walkers Corporate Limited, Grand Cayman), status ACTIVE. The protocol itself is governed by the Aave DAO.
sourceWhy
aave-v3-origin repository lists audits for v3 through v3.7 by ABDK, OpenZeppelin, Trail of Bits, PeckShield, Sigma Prime, Certora, MixBytes, Cantina, Oxorio, Pashov, Blackthorn, Enigma Dark, Savant, Sherlock and others. Latest listed: v3.7, March 2026 (Pashov, Sherlock, Certora, MixBytes, Savant, Enigma). Exact day not shown, so date left null. V4 and Umbrella audits not verified.
source sourceWhy
Upgrades go through Aave Governance v3 (AAVE/stkAAVE/aAAVE holders vote; 1 or 7 day timelock before execution). Two guardian multisigs exist: Protocol Emergency Guardian (4-of-7, holds EMERGENCY_ADMIN for markets, can act in emergency mode) and Governance Emergency Guardian (5-of-9, community-elected, can veto a malicious payload). Docs note guardians can pause markets (the older docs say a 6/10 multisig). Who holds upgrade rights on the token contract itself was not verified. After the 2026-04-18 incident Aave froze rsETH markets within hours.
source sourceWhy
No vesting/unlock schedule read. Etherscan page shows max supply 16,000,000 and circulating 15,434,925 AAVE, but I did not verify whether any scheduled release exists.
sourcePrice beside proof
How measured
DefiLlama parent 'Aave' entry (V2, V3, V4), trailing 1 year (total1y). Fees include borrow interest, flash-loan and liquidation fees; revenue = share going to the Aave treasury. Per DefiLlama, buybacks of AAVE from the treasury began 2025-04-09 but not daily. Currency not stated on API page (assumed USD).
How counted
Etherscan holder table did not load; no verified top-10 figure.
Context only: not scored and not a valuation. Aggregator data as of 7 Oct 2026.
Today's price, and what it would take
Snapshot from the aggregator on 7 Oct 2026. The live price loads from CoinGecko when your browser allows it.
Pick a multiple of the last 12 months of fees. The tool shows the token price that multiple would imply with today's supply. The multiple is your assumption, not our estimate. The market pays 4 x annual fees today.
Fees are what users pay, not what holders receive: how much reaches token holders depends on the design (burns, treasury, fee switches, validators). The result ignores issuance, risk, growth and time. A lens to ask questions, not a valuation or advice.
Where the points come from
Incidents and legal actions
Incidents
- 2026-04-18 Attackers took about 116,500 Kelp DAO rsETH (about $293M) from Kelp DAO's LayerZero-based bridge and deposited it as collateral on Aave v3, borrowing WETH. Aave contracts reportedly worked as designed; the failure was the collateral's backing. Aave froze rsETH markets on v3 and v4. Lookonchain estimated about $195M bad debt; the governance forum cites a deficit of about 163,183 ETH falling to about 75,081 ETH. Outcome: A 'DeFi United' rescue effort was organised (proposals: Aave DAO 25,000 ETH, Mantle credit facility up to 30,000 ETH, others). Its tracker shows 'Recovery target reached' subject to pending votes and execution. Final bad debt and whether any Aave depositors ultimately lost funds were not verified. USDT/USDC pools hit 100% utilisation, delaying withdrawals of about $5.1B. Outcome for users unclear source
Regulator and court actions
- 2025-12-16 SEC investigation into the Aave Protocol (about four years, with a Wells Notice referenced) closed. Announced by Aave CEO Stani Kulechov; the attached SEC letter says staff did not plan to recommend enforcement. Outcome: Closed, no enforcement action, no fine. SEC did not confirm or deny the investigation. Dismissed or closed, no merits finding source
What we could not verify
Not verified: top-10 holder concentration (Etherscan holder table did not load); any AAVE unlock schedule; exact date of latest audit (repository shows 'March 2026' for v3.7); V4/Umbrella audits; upgrade rights on the AAVE token contract; final outcome and any ultimate user loss from the 2026-04-18 rsETH incident (class set to 'unclear'). Primary sources for that incident (Aave post-mortem) were not read; figures come from press and forum posts. DefiLlama API pages do not state currency.
Facts as of 7 Oct 2026. Searches are not exhaustive. Report an error with a source: corrections policy. Education only, not investment advice.
Sources
- [1] CoinGecko Aave accessed 2026-10-07
- [2] DefiLlama fees API Aave (fees) accessed 2026-10-07
- [3] DefiLlama fees API Aave (revenue) accessed 2026-10-07
- [4] Kraken AAVE price page accessed 2026-10-07
- [5] Aave v3-origin repository (audits, license) accessed 2026-10-07
- [6] Aave docs: audits summary accessed 2026-10-07
- [7] Aave docs: governance (v3, guardians) accessed 2026-10-07
- [8] Aave docs: Aave Guardians accessed 2026-10-07
- [9] Bloomberg LEI record, AAVE LABS LTD. accessed 2026-10-07
- [10] The Block: SEC ends Aave probe (2025-12-16) accessed 2026-10-07
- [11] Cointelegraph: Aave TVL falls after Kelp DAO hack accessed 2026-10-07
- [12] Aave governance forum: rsETH incident funding update accessed 2026-10-07
- [13] Crypto Briefing: Aave DAO 25,000 ETH rescue plan accessed 2026-10-07
- [14] DeFi United tracker accessed 2026-10-07
- [15] Etherscan AAVE token page accessed 2026-10-07
Common questions about Aave
Is Aave a good investment?
This page does not say, and it is not investment advice. It shows what can be checked. In our pilot check, Aave shows mixed evidence, score 89 out of 100, with 84% of the evidence verified. Price and market value are context, not a valuation. Use the key facts and sources above and decide for yourself.
Who controls Aave?
Control risk: Timelocked governance. Details and sources are in the key facts above.
Has Aave been independently audited?
Independent audit: Published. Details and sources are in the key facts above.
How much new AAVE supply is coming in the next 12 months?
New supply in the next 12 months: Not verified of the current supply. Details and sources are in the key facts above.
Does Aave have revenue we can check?
Revenue evidence: Checkable on-chain. Details and sources are in the key facts above.