Aave Labs outlines layered security plan for V4 after $1.5 million audit program

Aave Labs has revealed a comprehensive, security-first framework for Aave V4, involving a year-long audit and verification process funded by a $1.5 million budget from the Aave DAO. This process integrated formal verification from the design stage, manual audits by firms like Certora, ChainSecurity, and Trail of Bits, invariant testing, and a public security contest on Sherlock. Based on this experience, Aave Labs committed to five long-term security principles for future upgrades, including embedding formal verification early, maintaining layered methodologies, continuous verification, an ongoing bug bounty program, and developing AI-assisted scanning. The V4 codebase was intentionally made smaller and more modular. This security disclosure comes amid internal governance turbulence, including key contributors like BGD Labs and the Aave Chan Initiative planning to step away due to escalating tensions over funding and protocol direction.

(Source：The Block)