News Heat Trend
Project Overview
Aave is a decentralized finance protocol for borrowing and lending, where users can participate as depositors or borrowers. Depositors provide liquidity to the market to earn a passive income, while borrowers are able to borrow in an overcollateralized (perpetually) or undercollateralized (one-block liquidity) fashion. AAVE is used as the center of gravity of Aave Protocol governance, allowing users to vote and decide on the outcome of Aave Improvement Proposals (AIPs). Additionally, AAVE can be staked within the protocol's Safety Module to provide security/insurance to the protocol and depositors. Stakers earn staking rewards and fees from the protocol.
Aave Founder: Solar Energy, GPUs, Robots and Other Assets Will Be Added to Lending Landscape in the Future
Odaily reports: Aave founder and CEO Stani posted on X platform that his way of measuring Aave's potential market size is "addressable collateral" — the broader the range of assets that can serve as collateral, the greater the lending market space becomes.Stani stated that Aave initially started with crypto assets, then expanded into securities through Coinbase Tokenized Stocks and Horizon RWA, and in the future will also cover assets such as solar energy, batteries, GPUs, robots, and space infrastructure. He expressed his belief that this transformation will continue through 2050, and that Aave's goal is to accelerate this process by approximately 10 years by providing financing for the assets that will drive the "Age of Abundance."
Aave 将在 Avalanche 推出 RWA 专项借贷市场
Aave plans to launch a Real World Assets (RWA) lending hub on Avalanche, enabling institutions to borrow stablecoins using tokenized financial assets as collateral without liquidating their existing positions. Tether's USAT will serve as the primary source of USD liquidity. Within two months of Aave V4 launching on Avalanche, total deposits have exceeded $20 million.
Tare Completes $13.25 Million Seed Round, Led by Blockchain Capital
Odaily News — The funding round was led by Blockchain Capital, with participation from Janus Henderson, Strobe Ventures, Venture Dept, Neoclassic Capital, and the Avalanche Foundation. Aave CEO Stani Kulechov, Tether co-founder Phil Potter, and Privy CEO Henri Stern also participated in the investment. Tare plans to develop loan management software on Avalanche, creating digital records for loans and automating back-office processes such as record-keeping, payment distribution, and transaction verification, in order to consolidate fragmented private credit business processes and reduce intermediary and operational costs.
Analysis: PONS ranks 13th in revenue over the past 30 days, with a valuation-to-revenue ratio only about one-tenth of PUMP's
According to Odaily, Blockworks Research analyst AJC stated that over the past 30 days, PONS ranked 13th in crypto market revenue, yet its FDV/Revenue multiple stands at just 0.7x—the lowest among the top 15 tokens by revenue.For comparison, CARDS, PUMP, CAKE, AAVE, HYPE, and LINK have FDV/Revenue multiples of approximately 2.8x, 7.7x, 9.6x, 45.2x, 168.5x, and 212.2x, respectively. AJC believes that PONS' current valuation relative to its revenue level is significantly lower than that of other high-revenue protocols.
Aave 创始人：Aave 调整低采用率资产与网络布局，旨在聚焦高价值市场与证券融资
Aave 创始人 Stani 表示，近期对 Aave 上低采用率资产及网络的逐步收缩，不应被解读为对任何 L1 或 L2 的立场判断。此举主要是为了降低 Aave 在运营、技术及经济层面的风险敞口，从而将资源集中于更具影响力的重点方向，包括扩大现有高价值市场以及拓展证券融资业务。
Bio Protocol Launches OpenLabs, Plans to Support Scientific Projects and Agent Collaboration via USDC Yield Mechanism
DeSci protocol Bio Protocol has announced the launch of OpenLabs, positioning it as a coordination layer for human-agent collaboration in scientific research, aimed at transforming scientific ideas into funded execution projects. OpenLabs comprises five interconnected layers: Posts & Discovery, Projects, Agent Collaboration, Web3 Incentive Layer, and a Bounty System. Regarding incentives, OpenLabs plans to adopt a USDC yield-based funding mechanism to finance agent reasoning and tool usage. Users can deposit USDC and select projects to support; funds are allocated to audited yield vaults such as Morpho and Aave. The generated yield flows to projects for computation, queries, and simulations, while the principal assumes no risk. When a project reaches the stage requiring real capital, it can issue tokens via the Bio launchpad or pursue private fundraising and follow the traditional biotech path.
European regulatory proposal may restrict user access to DeFi, Aave founder Stani Kulechov criticizes
Odaily News: Stani Kulechov posted that he is disappointed with the European Central Bank and the European Banking Authority's response to the MiCA consultation. The related proposal advocates banning stablecoin payment yields, and suggests restricting crypto asset service providers from offering users access to DeFi, limiting the groups of users who can access DeFi through "suitability tests," and also considering implementing a certification system for DeFi lending protocols, but without clearly specifying an actual enforcement framework. Stani believes that having regulators decide which protocols are suitable for European users could create more closed ecosystems and weaken the liquidity and network effects of open financial networks; excessive restrictions may also increase resistance to innovation. He stated that stablecoins, DeFi, and tokenized securities are expected to reduce friction in financial services, improve transparency, and expand users' access to financial services, and called on European regulators to place users and their interests at the core of the regulatory framework, saying "DeFi will ultimately win."
Blockchain Association Launches Vaults Workflow, Uniting Dozens of Member Institutions to Drive Policy Formulation
According to a post by the Blockchain Association (@BlockchainAssn), the Blockchain Association has officially launched the Vaults Workstream, bringing together dozens of leading member organizations including a16z Crypto, Aave, Uniswap, Grayscale, dYdX Foundation, Ethena, Morpho, and Multicoin to participate in Washington-based policy discussions on on-chain finance. As an emerging component of on-chain finance infrastructure, Vaults can provide users with diverse asset exposure, support composable and personalized investment strategies, and offer high flexibility in manual control, governance, and risk management. Members of this workstream will engage directly with the SEC to assist legislators in understanding Vault mechanics and the applicability of existing regulatory frameworks, with the goal of aligning regulatory rules with technological development to ensure the United States maintains its leading position in on-chain financial innovation.
US equity exposure can now participate in DeFi on-chain, Coinbase natively launches tokenized stocks on Base
: Coinbase announced that its tokenized stocks have been natively launched on the Base chain, built on the B20 standard, with the underlying stocks actually held on a 1:1 basis by regulated custodian Alpaca through a bankruptcy-remote structure. Token holders directly own the corresponding stock ownership. Non-US users in globally compliant jurisdictions only need a wallet and an internet connection to gain US equity exposure without a brokerage account or waiting for settlement, and can trade in a 7×24 AMM pool. The first batch supports companies such as Apple and Nvidia. Tokenized stocks can be freely held, transferred, and traded, with no whitelisted wallets or platform lock-ups. Users can use tokenized Nvidia stock as collateral to borrow on Aave, or deposit Apple stock into a decentralized exchange to earn yield. Dividends and stock splits are handled through an on-chain multiplier mechanism. Ecosystem projects such as Aerodrome and Aave have publicly supported the B20 standard. Coinbase stated that more tokenized stocks will be listed in the coming weeks, and it will continue to bring other real-world assets on-chain.
Andre Cronje: DeFi No Longer Exists, Only On-Chain Finance Remains
Odaily News: Andre Cronje, founder of DeFi platform Flying Tulip and creator of Fantom Network, stated that most DeFi protocols are no longer truly decentralized, with only a few niche areas still qualifying as DeFi. He believes DeFi has evolved into "on-chain finance" or "open finance." He pointed out that true DeFi should possess characteristics such as decentralization, immutability, and the absence of intermediaries, whereas the intermediaries in most current protocols have become corporations, taking on traditional financial institution roles such as decision-makers and risk committees. Cronje noted that this does not mean true DeFi has completely disappeared, as some protocols are still innovating. Data from DefiLlama shows that the total value locked (TVL) in DeFi has dropped from $167 billion in early October 2025 to $75 billion at the time of the original report over the past 10 months, a decline of more than half. In a working paper published in March, the European Central Bank (ECB) analyzed Aave, MakerDAO, Ampleforth, and Uniswap, finding that based on holding snapshots from November 2022 and May 2023, the top 100 addresses holding governance tokens in these protocols each controlled over 80% of the token supply. The ECB consequently questioned the level of decentralization of these DAOs and whether they should continue to be regarded as "fully decentralized" services exempt from the Markets in Crypto-Assets Regulation (MiCA). (Cointelegraph)
Ethereum Staking Reward Cut Proposal Sparks Outrage: Community Fears Damage to DeFi and Weakened Decentralization
Odaily News - Ethereum Improvement Proposal EIP-8363 ("Tapered Issuance Burn") has triggered strong backlash from the community, becoming one of the most contentious debates over Ethereum's economic model since The Merge. The proposal, put forward by Ethereum Foundation researcher Justin Drake, ETHCC co-founder Jerome de Tychey, and others, aims to gradually reduce validator rewards as the ETH staking ratio rises, ultimately bringing new issuance down to zero when staked ETH reaches 50% of the total supply.However, the proposal has drawn opposition from DeFi developers, staking service providers, and institutional investors alike. Critics argue that lowering staking yields could weaken the network's decentralization, disrupt Ethereum's DeFi ecosystem, and heighten market uncertainty around ETH's monetary policy. Opponents believe market mechanisms can already naturally regulate staking demand. Berryman noted that as yields decline to around 2%, new staking demand may naturally taper off, without the need for protocol-level changes to issuance policy.Ether.fi founder Mike Silagadze stated that the proposal is "detrimental to decentralization, Ethereum adoption, and the network's reputation." Bitwise Ethereum business lead Steve Berryman also pointed out that institutional investors require policy certainty, and adjusting the issuance mechanism could introduce additional uncertainty. Greg Koumoutsos, technical research lead at the Lido Labs Foundation, noted that Ethereum pays not only in "slashable ETH" but also in decentralization, node diversity, censorship resistance, and network resilience. Aave founder Stani Kulechov also warned that reducing ETH staking yields could impact the DeFi ecosystem, as a large volume of staking derivatives has become an integral part of lending and yield strategies.Additionally, the community is concerned that lowering staking rewards could paradoxically intensify centralization. Since individual validators lack economies of scale, declining yields may drive smaller nodes to exit, while large exchanges and institutional staking providers—backed by greater business demand—could continue expanding their market share.Currently, EIP-8363 involves not only staking reward adjustments but has also sparked broad discussions over Ethereum's long-term monetary policy, governance stability, and institutional confidence. The community believes that such a significant change to the economic model requires more thorough debate and a longer evaluation period. (Cointelegraph)
Staking yields fall to zero, Aave founder Stani questions Ethereum EIP-8361
Odaily News: Aave founder Stani Kulechov published a lengthy post stating that Ethereum's EIP-8361 progressive issuance burn proposal has systemic issues. The proposal aims to gradually burn consensus layer issuance rewards, reducing the net staking yield to zero when the total amount of staked ETH reaches 60.25 million, approximately 50% of the total supply. Stani Kulechov believes that the second-order ripple effects of this proposal have not been fully modeled and could damage the foundations of the Ethereum ecosystem across multiple dimensions. He stated that a zero-yield mechanism may exacerbate staking centralization, with home validators being the first to exit due to fixed costs such as hardware and electricity, while non-yield-driven entities like ETF issuers, exchanges, and corporate treasury funds will remain. MEV rewards, which are unaffected by the proposal, would also expand the advantages of top professional operators. He also noted that individual stakers could face tax and operational risks. If tax authorities calculate taxes based on the full issuance amount and classify the burned portion as a capital loss, home node operators could experience after-tax losses. With penalty standards for faults remaining unchanged, the node recovery period after a fault could be extended by up to 14 times as net yields decline. Stani Kulechov stated that staking yields serve as the pricing benchmark for on-chain ETH interest rates. A decline in yields could cause DeFi lending and fixed-income markets to lose their pricing anchor, potentially driving on-chain capital toward stablecoins offering 4% to 5% annual returns. For institutional investors, predictable yields are a core competitive advantage of ETH relative to BTC. If yields fall to zero while volatility increases, ETH's differentiation in the store-of-value track would diminish. He also pointed out that after the proposal is implemented, MEV's share of total validator revenue could rise from the current 7% to nearly 30%, potentially incentivizing operators to prioritize relay nodes that support censorship, thereby weakening Ethereum's credible neutrality. If an MEV burn mechanism is subsequently added, validator revenue could be nearly eliminated. Stani Kulechov suggested that the proposal's authors release after-tax yield assessments for individual node operators, tax opinions from major jurisdictions, and cascade risk models for the DeFi ecosystem, while setting a non-zero net yield floor. He believes that staking centralization should be addressed directly with targeted measures, rather than by suppressing validator yields across the board.
Over $6 Million in Assets Stolen from Base Anonymous Multisig Vault, 7 Signer Identities Unknown
A crypto asset vault on Base had approximately 1,783 wstETH transferred out on October 4, resulting in losses exceeding $6 million. On-chain records show that the vault is controlled by a 3-of-7 Safe, and the identities of the seven signers have not yet been made public.Security firms stated that the attacker borrowed aBaswstETH from the vault and swapped it for wstETH through Aave. Neither the Base chain itself nor Aave's core contracts have been identified as being exploited, and the specific authorization vulnerability remains unconfirmed. (Bitcoin.com News)
A suspected Aave team member address sold 50,000 AAVE for $8 million in a week, still holds 30,000 AAVE
According to on-chain analyst Ember Monitoring, an address suspected to belong to an Aave team member (0x0c94...8297b) has sold 50,000 AAVE over the past week for $8 million, at an average price of $160. Between October 2020 and October 2021, this address received 108,000 AAVE vested from the Aave Team wallet; after selling, it still holds 30,000 AAVE, worth $5.5 million.
An address has accumulated 12,134.13 ETH, worth $32.41 million, and deposited them into Aave
According to on-chain analyst Ai Yi, an address opened a position worth $8.07 million in ETH four hours ago; since September 2, it has accumulated 12,134.13 ETH, worth $32.41 million, at an average buy price of $2,671.25, and has now deposited them into Aave.
Whale withdraws 39,000 AAVE from Kraken, worth approximately $6.2 million
On-chain data shows that a whale first deposited 5.97 million USDC into Kraken, followed by the withdrawal of 39,018 AAVE tokens, worth approximately $6.2 million.
Worth $4.26 million, two whales swapped 50.95 WBTC for 25,500 AAVE
According to Lookonchain monitoring, two whales today swapped 50.95 WBTC for 25,500 AAVE, worth $4.26 million.
Cumulative profit of $12.65 million, a Hyperliquid whale closed multiple long positions, gaining $1.604 million
According to Onchain Lens monitoring, a Hyperliquid whale closed multiple profitable long positions an hour ago, including $941,000 profit on an AAVE long, $400,000 on a ZEC long, $216,000 on a JUP long, and $47,000 on an ENA long. The cumulative profit reached $12.65 million.
Over $6 Million in Assets Stolen from Base Anonymous Multisig Vault, 7 Signer Identities Unknown
A crypto asset vault on Base had approximately 1,783 wstETH transferred out on October 4, resulting in losses exceeding $6 million. On-chain records show that the vault is controlled by a 3-of-7 Safe, and the identities of the seven signers have not yet been made public.Security firms stated that the attacker borrowed aBaswstETH from the vault and swapped it for wstETH through Aave. Neither the Base chain itself nor Aave's core contracts have been identified as being exploited, and the specific authorization vulnerability remains unconfirmed. (Bitcoin.com News)
Aave v3 contracts unaffected, founder responds to exploit incident
according to monitoring by Stani Kulechov, Aave founder Stani Kulechov stated that what was exploited was a third-party external adapter built on top of Aave v3, and the Aave v3 contracts themselves were not affected. The FlashLoopAdapter in the Aave v3 Loop Safe module involved had access control vulnerabilities in its open() and close() functions. The attacker forged Safe authentication and arbitrary module execution to steal approximately 114.09 ETH from two Safe multisig addresses, and repaid approximately 1,300 WETH in debt to unlock collateral.
SlowMist: Approximately 114.09 ETH Stolen, Aave v3 Loop Safe Module Vulnerability Affects Two Safe Multisig Wallets
SlowMist has issued a security alert stating that a vulnerability has been discovered in the Aave V3 Loop Safe Module. Attackers exploited forged Safe authentication and arbitrary Module execution to steal approximately 114.09 ETH from two Safe multisig wallets.The attackers bypassed authentication by forging a Safe that always returns true, and leveraged an arbitrarily controllable router and calldata to execute module transactions, transferring weETH and Aave collateral. The attackers repaid approximately 1,300 WETH in debt to unlock the collateral.
Aave Founder: Following Up on MetaMask Incident with Lido, Aave Market Currently Normal
Aave founder Stani stated on X that the team is tracking the developments of the MetaMask staking infrastructure security incident in collaboration with Lido. Stani noted that so far, the Aave market has not been affected by the incident, and all operations remain fully operational.
SlowMist Unveils Details of Allbridge Bridge Attack: Forged CCTP Messages + Flash Loans, Insufficient Mint Verification
Odaily News, SlowMist Security Team disclosed that the cross-chain bridge project Allbridge suffered an attack on August 19, 2026, with losses of approximately $190,000. Notably, this attack was not executed instantaneously—the attacker began laying the groundwork nearly a month in advance, bypassing the verification mechanism through forged cross-chain messages.According to SlowMist's analysis, on July 26, the attacker directly called Circle's MessageTransmitterV2.sendMessage function on the Polygon chain, constructing a cross-chain message disguised as CCTP-style, claiming a transfer of 1 million USDC, despite no actual USDC burn operation occurring. Subsequently, Circle generated a valid attestation for this complete message following standard procedures.Approximately 24 days later, on August 19, the attacker waited for the Base Router to receive a genuine CCTP deposit, bringing its balance to approximately 191,000 USDC, then launched the attack just 6 seconds later. Using the previously forged message and attestation, the attacker called Allbridge's receiveCctpMessage function. Due to the project's lack of critical validation, the system mistook the fraudulent cross-chain message for a genuine deposit and recorded a 1 million USDC credit.Subsequently, the attacker borrowed approximately 809,000 USDC temporarily via an Aave flash loan to match the Router's balance with the forged amount, then utilized the internal credit record to call the transfer function, ultimately moving out approximately 999,000 USDC (after deducting a 0.1% fee). After repaying the flash loan and fees, the attacker netted approximately $189,800 in profit. The root cause of this vulnerability lies in Allbridge's failure to verify the identity of the cross-chain message sender and receiver, as well as its failure to confirm whether USDC was genuinely minted or whether the balance actually increased—instead directly trusting the amount and message hash data constructed by the attacker.SlowMist emphasized that on-chain message verification does not equate to actual asset arrival. Cross-chain protocols must not only verify message authenticity but also ensure the message source is trustworthy, confirm the receiver is Circle's official TokenMessengerV2, and only record assets after confirming actual minting and balance changes. This incident once again highlights the security risks in cross-chain bridges' message verification and asset settlement processes.
The on-chain tokenized asset market is expected to reach $4 trillion by the end of 2028, while Standard Chartered projects Chainlink will hit $200 by the end of 2030
Odaily News: Standard Chartered initiated coverage on Monday of blockchain oracle project Chainlink, projecting LINK to reach $200 by the end of 2030 — roughly 25 times its current price of around $8. The bank's phased targets are $13 by the end of this year, followed by $41, $82, and $133. Standard Chartered estimates that the on-chain tokenized asset market will reach $4 trillion by the end of 2028, with DeFi-deployed assets hitting $2.7 trillion by 2030 — a 37-fold increase from current levels. The bank expects Chainlink fees to grow approximately 25-fold over the same period, assuming token prices track fee growth. Chainlink secures over $110 billion in total value, covering approximately 70% of the value that global DeFi relies on from oracles, with a share exceeding 80% on Ethereum; Aave V3 accounts for 44% of that. Swift, DTCC, Euroclear, JPMorgan, Mastercard, UBS, Fidelity, and S&P Global are all listed as institutions using its services. Chainlink still lags behind LayerZero in cross-chain interoperability. Following the $292 million attack in April, over $7 billion in token value has migrated to Chainlink CCIP, with second-quarter transaction volume reaching $4.9 billion — up 353% year-over-year. Risks include slowing institutional tokenization, pilots not converting to production processes, and technical failures impacting confidence. (Decrypt)
Aave Labs proposes establishing an Aave Foundation to hold and protect protocol intellectual property rights.
The decentralized lending protocol Aave community has released an ARFC proposal, proposing the establishment of a "memberless" foundation entity, Aave Foundation, in the Cayman Islands to hold the Aave trademarks, core domain names, and intellectual property rights of the codebase. According to the proposal's plan, the structure will be implemented in phases. Phase I involves solely the establishment of the entity and the appointment of independent directors and supervisors, with all associated costs borne by the decentralized autonomous organization (DAO) and no regular budget established.
SlowMist: Approximately 114.09 ETH Stolen, Aave v3 Loop Safe Module Vulnerability Affects Two Safe Multisig Wallets
SlowMist has issued a security alert stating that a vulnerability has been discovered in the Aave V3 Loop Safe Module. Attackers exploited forged Safe authentication and arbitrary Module execution to steal approximately 114.09 ETH from two Safe multisig wallets.The attackers bypassed authentication by forging a Safe that always returns true, and leveraged an arbitrarily controllable router and calldata to execute module transactions, transferring weETH and Aave collateral. The attackers repaid approximately 1,300 WETH in debt to unlock the collateral.
Blockchain Association Launches Vaults Workflow, Uniting Dozens of Member Institutions to Drive Policy Formulation
According to a post by the Blockchain Association (@BlockchainAssn), the Blockchain Association has officially launched the Vaults Workstream, bringing together dozens of leading member organizations including a16z Crypto, Aave, Uniswap, Grayscale, dYdX Foundation, Ethena, Morpho, and Multicoin to participate in Washington-based policy discussions on on-chain finance. As an emerging component of on-chain finance infrastructure, Vaults can provide users with diverse asset exposure, support composable and personalized investment strategies, and offer high flexibility in manual control, governance, and risk management. Members of this workstream will engage directly with the SEC to assist legislators in understanding Vault mechanics and the applicability of existing regulatory frameworks, with the goal of aligning regulatory rules with technological development to ensure the United States maintains its leading position in on-chain financial innovation.
Sentora Initiates ARFC Proposal to Operate an Independent Lending Market on Aave V4
Odaily News: DeFi protocol Sentora has initiated an ARFC proposal to operate an independently curated lending market on Aave V4. The initial deployment will be on Ethereum, supporting stablecoin lending such as RLUSD, PYUSD, and OUSD, with Aave DAO receiving 50% of the revenue from this instance.The Aave DAO governance short-term executor will retain structural ownership of the instance and hold the management roles for all hub-and-spoke contracts, configurators, and the native AccessManager.
Aave Launches Ghost Pass and Upgrades Aave App, Aave Pro, and V3 User Experience
Aave posted on X that it has made multiple user experience improvements to Aave App, Aave Pro, and Aave V3, and thanked the community for its feedback. Aave also launched the Ghost Pass benefit, allowing users to post their high scores and receive a Ghost Pass.
Aave Founder: Considering Introducing a Token Burn Mechanism in Aavenomics 3.0
Aave founder Stani Kulechov stated that he is considering introducing an AAVE token burn mechanism in Aavenomics 3.0. Aavenomics 3.0 is a brand-new tokenomics upgrade launched by Aave, which has previously implemented measures such as AAVE buybacks backed by protocol revenue.
Related news
Over $6 Million in Assets Stolen from Base Anonymous Multisig Vault, 7 Signer Identities Unknown
A crypto asset vault on Base had approximately 1,783 wstETH transferred out on October 4, resulting in losses exceeding $6 million. On-chain records show that the vault is controlled by a 3-of-7 Safe, and the identities of the seven signers have not yet been made public.Security firms stated that the attacker borrowed aBaswstETH from the vault and swapped it for wstETH through Aave. Neither the Base chain itself nor Aave's core contracts have been identified as being exploited, and the specific authorization vulnerability remains unconfirmed. (Bitcoin.com News)
Aave Labs proposes establishing an Aave Foundation to hold and protect protocol intellectual property rights.
The decentralized lending protocol Aave community has released an ARFC proposal, proposing the establishment of a "memberless" foundation entity, Aave Foundation, in the Cayman Islands to hold the Aave trademarks, core domain names, and intellectual property rights of the codebase. According to the proposal's plan, the structure will be implemented in phases. Phase I involves solely the establishment of the entity and the appointment of independent directors and supervisors, with all associated costs borne by the decentralized autonomous organization (DAO) and no regular budget established.
European regulatory proposal may restrict user access to DeFi, Aave founder Stani Kulechov criticizes
Odaily News: Stani Kulechov posted that he is disappointed with the European Central Bank and the European Banking Authority's response to the MiCA consultation. The related proposal advocates banning stablecoin payment yields, and suggests restricting crypto asset service providers from offering users access to DeFi, limiting the groups of users who can access DeFi through "suitability tests," and also considering implementing a certification system for DeFi lending protocols, but without clearly specifying an actual enforcement framework. Stani believes that having regulators decide which protocols are suitable for European users could create more closed ecosystems and weaken the liquidity and network effects of open financial networks; excessive restrictions may also increase resistance to innovation. He stated that stablecoins, DeFi, and tokenized securities are expected to reduce friction in financial services, improve transparency, and expand users' access to financial services, and called on European regulators to place users and their interests at the core of the regulatory framework, saying "DeFi will ultimately win."
A suspected Aave team member address sold 50,000 AAVE for $8 million in a week, still holds 30,000 AAVE
According to on-chain analyst Ember Monitoring, an address suspected to belong to an Aave team member (0x0c94...8297b) has sold 50,000 AAVE over the past week for $8 million, at an average price of $160. Between October 2020 and October 2021, this address received 108,000 AAVE vested from the Aave Team wallet; after selling, it still holds 30,000 AAVE, worth $5.5 million.
Aave v3 contracts unaffected, founder responds to exploit incident
according to monitoring by Stani Kulechov, Aave founder Stani Kulechov stated that what was exploited was a third-party external adapter built on top of Aave v3, and the Aave v3 contracts themselves were not affected. The FlashLoopAdapter in the Aave v3 Loop Safe module involved had access control vulnerabilities in its open() and close() functions. The attacker forged Safe authentication and arbitrary module execution to steal approximately 114.09 ETH from two Safe multisig addresses, and repaid approximately 1,300 WETH in debt to unlock collateral.
SlowMist: Approximately 114.09 ETH Stolen, Aave v3 Loop Safe Module Vulnerability Affects Two Safe Multisig Wallets
SlowMist has issued a security alert stating that a vulnerability has been discovered in the Aave V3 Loop Safe Module. Attackers exploited forged Safe authentication and arbitrary Module execution to steal approximately 114.09 ETH from two Safe multisig wallets.The attackers bypassed authentication by forging a Safe that always returns true, and leveraged an arbitrarily controllable router and calldata to execute module transactions, transferring weETH and Aave collateral. The attackers repaid approximately 1,300 WETH in debt to unlock the collateral.