# Aave review: Trust Score 72/100 (Solid)

Source page: https://vaultx.llc/reviews/aave · independent VaultX review by Rex · updated 2026-11-05

Long-running, shipping DeFi lender with audits and no enforcement action found; ecosystem risks remain

Aave is a decentralized lending protocol that has shipped product since 2020 and keeps publishing upgrades such as V3, Governance V3, the buyback program and V4 deployments. Its own security primer says audits by Trail of Bits, Blackthorn and ChainSecurity found no critical or high-severity issues. Multiple outlets report the SEC ended its four-year investigation without recommending enforcement, and no regulator warnings or court cases were found in the notes. Weak spots: the notes give no named team roster or corporate jurisdiction for Aave Labs, there have been governance disputes over fees, and third-party exploits and a market freeze have touched the ecosystem.

**Red flags**
- The notes give no named founders or executives and no clear corporate jurisdiction for Aave Labs
- Governance disputes over fee flows between Aave Labs and the DAO, reported by Rekt
- Third-party tools and adapters tied to the Aave ecosystem have been exploited; one attribution was unverified when reported
- Aave froze markets after a suspected exchange-hack borrower used its liquidity, and kept nine assets at zero LTV when reopening
- Deposits reportedly fled after the KelpDAO exploit, despite Aave itself not being hacked (CoinDesk), showing contagion risk
- Smart-contract protocols carry inherent risk even when audited; audit results are partly self-reported

**Green flags**
- Live since 2017 (as ETHLend) and 2020 (V1), with regular, documented releases
- Published audits from three named firms reporting no critical or high-severity findings
- Multiple outlets report the SEC closed its four-year probe without recommending enforcement
- No FCA, VARA, FSA Seychelles, ASIC, CFTC or state action naming Aave was found in the notes
- No lawsuits or class actions found
- No confirmed hack of Aave's core protocol found in the sources
- Funds independent security journalism (Rekt News) and has open public governance
- Engages regulators openly through SEC and FCA comment letters

**Sources**
- Aave Docs changelog https://www.aave.com/docs/resources/changelog
- AAVE token docs https://aave.com/docs/ecosystem/aave
- Blockworks: Aave overview https://app.blockworks.com/projects/aave/about
- Aave V4 launch roadmap (governance) https://governance.aave.com/t/aave-v4-launch-roadmap/23134
- Aave blog https://aave.com/blog
- Aave security assessment brief https://www.aave.com/files/aave-security-assessment-brief.pdf
- Rekt: Aave winter of discontent https://rekt.news/aave-winter-of-discontent
- The Block: SEC ends Aave probe https://www.theblock.co/news/regulation/2025-12-16-defi-will-win-aave-ceo-says-sec-ends-years-long-probe-382857
- CoinMarketCap: SEC closes four-year Aave investigation https://coinmarketcap.com/academy/article/sec-closes-four-year-aave-investigation
- CoinDesk: Aave coverage https://www.coindesk.com/tag/aave
- CryptoSlate: Aave news https://cryptoslate.com/news/aave/
- Rekt News governance thread https://governance.aave.com/t/rekt-news-aave-ecosystem-security-coverage/25094
- Aave Labs SEC policy submission https://aave.com/policy/sec-regulation-crypto-assets
- Crypto Times: Aave, Kamino and Veda urge SEC https://www.cryptotimes.io/2026/11/03/aave-kamino-and-veda-urge-sec-to-clarify-rules-for-defi-lending/

Not financial advice. Nobody can pay for a VaultX review.

---
VaultX: free crypto news and intelligence, https://vaultx.llc