Aave Labs published this week on the DAO governance forum a detailed security framework for the upcoming Aave V4 upgrade, revealing an audit and verification process spanning nearly a year, funded by a $1.5 million budget approved by the community.
The program spent 345 days under review and included formal verification, manual audits, invariant testing, fuzzing and a public security contest held on Sherlock between December 2025 and January 2026. More than 900 independent researchers participated in that event, submitting around 950 findings, with no critical or high-severity vulnerabilities reported. Among the external firms involved in the process were Certora, ChainSecurity, Trail of Bits and Blackthorn.
Based on this experience, the Aave Labs team committed to adopting five permanent security practices: formal verification from the early stages of development, layered audit methodologies, continuous verification throughout the development cycle, a bug bounty program with no expiration date, and the development of AI-assisted smart contract analysis tools.
The security framework was announced amid internal tensions within the Aave Labs ecosystem. BGD Labs, the protocol’s long-standing technical contributor, announced its withdrawal after four years of work. Adding to that, ACI founder Marc Zeller decided to step back the Aave Chan Initiative from the protocol starting in July.
Source: https://governance.aave.com/t/security-by-design-aave-v4/24224
Disclaimer: Crypto Economy Flash News are based on verified public and official sources. Their purpose is to provide fast, factual updates about relevant events in the crypto and blockchain ecosystem.
This information does not constitute financial advice or investment recommendation. Readers are encouraged to verify all details through official project channels before making any related decisions
