Aave Spends $1.5M on 345-Day Audit to Strengthen V4 Security

TheNewsCrypto2026-03-06 tarihinde yayınlandı2026-03-06 tarihinde güncellendi

Özet

Aave Labs has invested $1.5 million in an extensive 345-day audit program for its upcoming V4 upgrade, making it one of the most comprehensive security reviews in DeFi. The audit involved multiple security firms, including ChainSecurity, Trail of Bits, Blackthorn, and Certora, as well as a public contest hosted on Sherlock. Over 900 researchers participated and submitted more than 950 findings. No critical or high-severity vulnerabilities were discovered, reinforcing confidence in Aave’s hub-and-spoke architecture. The new security framework integrates formal verification, layered manual and automated testing, continuous monitoring, bug bounties, and AI tools to detect unusual attack paths from the earliest development phase.

The team at Aave Labs has reportedly spent around $1.5 million on a huge audit program, marking one of the most thorough security reviews in DeFi so far. The review process lasted around 345 days and comprised various security companies and a large public audit contest.

The period of moving quickly and breaking things is dissolving slowly. In the current scenario of the market, resilience and security are the real competitive edge. The team is majorly backed by Aava DAO in terms of funding, and it brought in prominent security companies such as ChainSecurity, Trail of Bits, Blackthorn, and Certora.

Rather than one audit pass, the code was tested from various angles. Combining all, the protocol went through around a complete year of testing by internal teams, external auditors, and independent researchers.

The biggest phases comprised a six-week public security contest on Sherlock between December 2025 and January 2026. Over 900 researchers were a part of the contest and submitted more than 950 findings.

Strengthening The Trust

Regardless of that big review, any critical or high-severity vulnerabilities weren’t found. This makes the confidence in Aave’s hub-and-spoke architecture more robust, which was initially made to suppress the complete attack surface of the protocol.

Aave Labs is not going after the old build-first, audit-later approach and is having V4 security teams working with the developers from the initial day. The framework covers the five core ideas, including formal verification to mathematically test the code, layered reviews amalgamating manual audits and automated testing, constant checks on every code update, continuing bug bounties and AI tools scanning for unusual attack paths.

The AI element stands out, and automated systems can catch edge cases that human auditors might miss. Verification company Certora helped describe strict rules known as ‘invariants’ that the code must always follow before it even attains manual review.

Highlighted Crypto News Today:

TRON Founder Justin Sun and the SEC Reach a Settlement Deal

İlgili Sorular

QHow much did Aave Labs spend on the audit program for V4 and how long did it take?

AAave Labs spent approximately $1.5 million on the audit program, which lasted around 345 days.

QWhich security companies were involved in the audit of Aave V4?

AThe audit involved prominent security companies including ChainSecurity, Trail of Bits, Blackthorn, and Certora.

QWhat was the scale of the public security contest held on Sherlock for Aave V4?

AThe public security contest on Sherlock lasted six weeks, involved over 900 researchers, and resulted in more than 950 findings being submitted.

QWere any critical or high-severity vulnerabilities found during the extensive audit process?

ANo, no critical or high-severity vulnerabilities were found during the audit process.

QWhat is one innovative method used in Aave's new security framework to catch potential issues?

AOne innovative method is the use of AI tools to scan for unusual attack paths and catch edge cases that human auditors might miss.

İlgili Okumalar

Three Months, 35 Billion Yuan: Investors Rush to Grab the OpenAI of the Physical World

Investors flock to a physical AI startup as the race for the "OpenAI of the physical world" heats up. Ji Jia Shi Jie (GigaWorld), a company dedicated to developing Artificial General Intelligence (AGI) for the physical world, has raised 3.5 billion RMB (approximately $490 million) in just three months, according to a report from investment media outlet Touzijie. The latest B2 funding round of 1 billion RMB attracted a wide range of top-tier investors, including sovereign wealth funds, industrial capital, and financial institutions. This brings the total funding for the young company, now valued over 10 billion RMB, to 3.5 billion RMB across three recent rounds. The company is led by Huang Guan, a post-90s Tsinghua University PhD with extensive experience in AI, autonomous driving, and entrepreneurship. Its core innovation is a "dual-pyramid" system comprising a five-layer data pyramid (from internet videos to real-world robot data) and a three-layer algorithm pyramid focused on world simulation, action alignment, and reinforcement learning. This system underpins its key models: the "World Action Model" (e.g., GigaBrain series for robot control) and the "World Generation Model" (e.g., GigaWorld series for simulating and understanding the physical world). Its models have reportedly achieved top rankings in global robotics benchmarks. Ji Jia Shi Jie argues that while current digital AGI excels in information processing, the next frontier is physical AGI—systems that can understand and interact with the real world. The company believes the field is approaching its "GPT-3 moment," a key inflection point in capability scaling. To achieve this, the company is pursuing a dual-market strategy. For the consumer (C) market, it launched the "SeeLight" brand and its S1 general-purpose humanoid robot, which has secured initial orders for deployment in real homes. For the business (B) market, it focuses on industrial automation with its Maker series robots, having signed agreements for large-scale deployment in factories, and its DriveDreamer world model for autonomous driving, which is already in use with over 30 automakers and tech companies. The report concludes that by bridging the gap between digital intelligence and physical action, Ji Jia Shi Jie aims to unlock a new wave of productivity, ultimately bringing physical AGI into everyday life.

marsbit20 dk önce

Three Months, 35 Billion Yuan: Investors Rush to Grab the OpenAI of the Physical World

marsbit20 dk önce

What's the Connection Between Pinduoduo's Huang Zheng and Blockchain?

This text explores the unexpected connection between Pinduoduo founder Colin Huang and blockchain, as suggested in his article *Turning Capitalism Upside Down*. Huang argues Pinduoduo's core business is about managing "uncertainty." He posits that wealth flows to the rich because they absorb life's uncertainties (e.g., illness, job loss) that devastate the poor, who pay a premium for certainty through insurance or stable prices. Pinduoduo's model attempts a "reverse insurance": by aggregating consumer demand via group-buying and flash sales, it creates a large, predictable order for manufacturers. This certainty allows factories to remove risk premiums, passing savings back as lower prices, thus partially reversing the wealth flow. The key obstacle, Huang notes, is that an individual's buying intent is an unreliable promise. He then asks if blockchain is the natural solution for this "reverse insurance." The text elaborates that blockchain, through smart contracts with binding deposits, could transform casual intent into a costly-to-break, enforceable commitment. This replaces interpersonal trust with coded rules, making promises credible, pricable, and resistant to fraud. Finally, the author draws a parallel to Bitcoin, framing two paths to creating certainty: the "Pinduoduo path" of aggregating decentralized will into scale, and the "Bitcoin path" of locking rules into immutable code. Both sacrifice something—personal freedom or system flexibility—to manufacture trust and predictability.

链捕手1 saat önce

What's the Connection Between Pinduoduo's Huang Zheng and Blockchain?

链捕手1 saat önce

The Storage Magnate Who Conquered a Trillion-Dollar Kingdom, Yet Ultimately Could Not Become the Richest

**Summary:** "The Memory Magnate Who Built a Trillion-Dollar Empire, Yet Never Became the Richest" explores the journey of Zhu Yiming, founder of GigaDevice (603986) and co-founder of the soon-to-IPO ChangXin Memory Technologies (CXMT). The article positions GigaDevice, a fabless chip designer now valued at ~¥340 billion, as a prequel to the massive IDM (Integrated Device Manufacturer) venture, CXMT. Starting in 2005 with minimal capital, Zhu strategically "picked up the pieces" by focusing on niche markets like NOR Flash and microcontrollers (MCUs), areas major players were exiting. This allowed GigaDevice to grow into a diversified semiconductor company, maintaining robust profitability even during industry downturns by controlling costs. However, the piece argues that in the highly cyclical and capital-intensive memory chip industry, the fabless model has limits. True resilience and scale require the ability for "counter-cyclical expansion" – investing heavily during downturns – a tactic only possible for IDMs like Samsung or SK Hynix. This insight led Zhu to partner with the Hefei city government in 2016 to establish CXMT, an IDM focused on DRAM. Zhu's symbolic moves, like forfeiting salary and diluting his equity, were crucial in securing the massive state and bank funding needed. CXMT's equipment base is now valued even higher than that of BYD's vast auto manufacturing empire. Despite the potential for CXMT to reach a market cap of ¥1-2 trillion upon its IPO, Zhu's indirect stake in both companies is estimated below 3%, placing his personal wealth far below that of China's top billionaires. The article concludes that his strategic vision built a trillion-yuan memory landscape, but the capital structure necessary to achieve it precluded a personal fortune of similar scale.

marsbit1 saat önce

The Storage Magnate Who Conquered a Trillion-Dollar Kingdom, Yet Ultimately Could Not Become the Richest

marsbit1 saat önce

Token Of Power Governance Exploit Drains $1.58 Million In WETH, TRM Says

Blockchain intelligence firm TRM Labs reports a governance exploit against the Token of Power protocol, resulting in a loss of approximately $1.58 million in WETH. The attacker exploited a missing timelock in the protocol's Aragon DAO setup, allowing them to propose, vote on, and execute a malicious action within a single block. The attacker funded the operation with 662 ETH from Tornado Cash, purchased enough TOP tokens to gain majority voting power, minted 10 billion new TOP tokens, and swapped them for WETH via a Balancer pool before moving funds back through Tornado Cash. The incident underscores that governance design is a critical security risk in DeFi, where parameters like timelocks provide essential reaction time. It also highlights how mixers and liquidity pools can be utilized in exploits without being directly compromised. Observers are now watching for any movement of the stolen funds and further remediation details from involved parties. This event is part of a broader shift in crypto, emphasizing the importance of underlying infrastructure, security, and governance alongside market movements.

bitcoinist4 saat önce

Token Of Power Governance Exploit Drains $1.58 Million In WETH, TRM Says

bitcoinist4 saat önce

XRP Ledger Daily Fees Drop Below $400 As Network Activity Question Returns

The XRP Ledger is drawing attention as daily network fees have fallen below $400. While low fees align with XRPL's design for affordable transactions and are often seen as a strength, the metric can also serve as an indicator of network demand and paid transaction volume. This data point of around $3,100 in weekly fee burn highlights the stark contrast with higher-fee chains like Ethereum and Bitcoin. The development fuels an ongoing debate. Proponents view low fees as a sign of efficiency and accessibility, while critics may question if the network is generating sufficient high-value activity relative to its market cap and payments-focused narrative. The article cautions against overstating the finding, noting a single low-fee day does not signify network failure. It instead adds context to discussions about XRPL's usage, especially alongside Ripple's broader initiatives in stablecoins (RLUSD), AI payments, and enterprise infrastructure. The report recommends monitoring for a fee rebound, checking transaction counts for a fuller picture, and confirming the trend via native explorers like Bithomp. It frames the story within a larger market shift where on-chain data, protocol updates, and infrastructure developments are becoming crucial alongside price action. The editorial stance is to present the verified data, explain its significance for assessing network activity, and avoid hype, positioning it as part of the daily crypto conversation.

bitcoinist6 saat önce

XRP Ledger Daily Fees Drop Below $400 As Network Activity Question Returns

bitcoinist6 saat önce

İşlemler

Spot

Futures

Popüler Makaleler

AAVE Nasıl Satın Alınır

HTX.com’a hoş geldiniz! Aave Protocol (AAVE) satın alma işlemlerini basit ve kullanışlı bir hâle getirdik. Adım adım açıkladığımız rehberimizi takip ederek kripto yolculuğunuza başlayın. 1. Adım: HTX Hesabınızı OluşturunHTX'te ücretsiz bir hesap açmak için e-posta adresinizi veya telefon numaranızı kullanın. Sorunsuzca kaydolun ve tüm özelliklerin kilidini açın. Hesabımı Aç2. Adım: Kripto Satın Al Bölümüne Gidin ve Ödeme Yönteminizi SeçinKredi/Banka Kartı: Visa veya Mastercard'ınızı kullanarak anında Aave Protocol (AAVE) satın alın.Bakiye: Sorunsuz bir şekilde işlem yapmak için HTX hesap bakiyenizdeki fonları kullanın.Üçüncü Taraflar: Kullanımı kolaylaştırmak için Google Pay ve Apple Pay gibi popüler ödeme yöntemlerini ekledik.P2P: HTX'teki diğer kullanıcılarla doğrudan işlem yapın.Borsa Dışı (OTC): Yatırımcılar için kişiye özel hizmetler ve rekabetçi döviz kurları sunuyoruz.3. Adım: Aave Protocol (AAVE) Varlıklarınızı SaklayınAave Protocol (AAVE) satın aldıktan sonra HTX hesabınızda saklayın. Alternatif olarak, blok zinciri transferi yoluyla başka bir yere gönderebilir veya diğer kripto para birimlerini takas etmek için kullanabilirsiniz.4. Adım: Aave Protocol (AAVE) Varlıklarınızla İşlem YapınHTX'in spot piyasasında Aave Protocol (AAVE) ile kolayca işlemler yapın.Hesabınıza erişin, işlem çiftinizi seçin, işlemlerinizi gerçekleştirin ve gerçek zamanlı olarak izleyin. Hem yeni başlayanlar hem de deneyimli yatırımcılar için kullanıcı dostu bir deneyim sunuyoruz.

394 Toplam GörüntülenmeYayınlanma 2024.12.11Güncellenme 2026.06.02

Tartışmalar

HTX Topluluğuna hoş geldiniz. Burada, en son platform gelişmeleri hakkında bilgi sahibi olabilir ve profesyonel piyasa görüşlerine erişebilirsiniz. Kullanıcıların AAVE (AAVE) fiyatı hakkındaki görüşleri aşağıda sunulmaktadır.