Is Aave Safe? Security, Bad Debt and the Safety Module
Quick answer. LlamaRisk, an Aave risk provider, found Aave's contracts were not compromised in the April 2026 rsETH exploit, and liquidations recovered most of the stolen collateral. Lenders still face collateral, oracle, liquidity and backstop risks that differ by market.
Video transcript
Stolen rsETH reached Aave as collateral in April 2026. LlamaRisk found Aave's contracts were not compromised, but lenders still face risks that differ by market.
Aave splits control. Routine changes need a vote and a one-day timelock, while deeper upgrades wait seven days. Emergency Safes can only pause markets or cancel proposals.
Losses have reached Aave three ways. A CRV short left about 1.6 million dollars of bad debt in 2022. A wstETH oracle error triggered liquidations, not bad debt. Then came rsETH.
A forged LayerZero message drained Kelp DAO's bridge. The attacker posted the rsETH on Aave and borrowed WETH, and suppliers were reportedly unable to withdraw for a time.
LlamaRisk modeled 123.7 to 230.1 million dollars of bad debt. Liquidations later recovered most of the collateral, and a coalition committed ETH for the rest.
Umbrella is gradually replacing the legacy Safety Module. Staked aTokens cover same-asset bad debt, but stakers can lose their full stake, and cover stops at Ethereum Core.
The remaining risks sit around the code, not in it: collateral, oracles, liquidity, L2 markets and governance.
Judge the market, not the brand. Name the instance, list the collateral, check each oracle, watch utilization and read the backstop.
Guardian's allocator ratings score each position from 0 to 100, including inherited exposure, then flag material changes the day they happen. Read the full guide or talk to Guardian.
On April 18, 2026, stolen rsETH reached Aave as collateral. Aave faced bad debt from a hack on another protocol's bridge.
This guide gives no verdict on whether Aave is safe. It covers Aave's controls, its bad debt events, its backstop and how to judge your own exposure.
How Aave Protects Deposits
Aave is a lending market. Suppliers deposit assets, and borrowers post collateral to borrow them.
Aave's docs say "positions are always over-collateralized." When a borrower's health factor falls below 1, liquidators repay part of the debt and take collateral at a discount.
Bad debt is what remains when the collateral cannot cover the loan, even after liquidation.
Aave's docs split control like this:
| Role | What it can do | Holder or limit |
|---|---|---|
| Level 1 executor | Listings, parameters, treasury | 3-day vote, then a 1-day timelock |
| Level 2 executor | AAVE token upgrades, governance changes | 10-day vote, then a 7-day timelock |
| Protocol Emergency Guardian | Pause or freeze markets | 4-of-7 Safe |
| Governance Emergency Guardian | Cancel malicious or faulty proposals | 5-of-9 Safe |
| Risk Stewards | Small risk parameter changes | Within Risk Framework bounds |
| Freezing Steward | Freeze a reserve at once | Cannot unfreeze; governance must |
Our admin key census checked these holders onchain. In its words: "At Aave, upgrades need an AAVE vote; a 4-of-7 Safe holds only emergency switches, and a 5-of-9 Safe can only cancel queued payloads."
Our TVL report found a one-day delay on Aave V3's fastest code path. No lending protocol in its sample could upgrade instantly.
Audits and bug bounty
Aave lists the audits behind every v3 release. Version 3.7, from March 2026, lists six firms: Pashov, Sherlock, Certora, MixBytes, Savant and Enigma.
Its bug bounty on Immunefi pays up to $1,000,000.
Bad Debt Events So Far
Three events show the main ways losses have reached Aave users.
| Date | What happened | Outcome |
|---|---|---|
| Nov 22, 2022 | A trader shorted up to 92M CRV; CRV rose 75% in hours | About $1.6M bad debt, cleared by buying 2.7M CRV |
| Mar 10, 2026 | An oracle cap priced wstETH about 2.85% too low | About $26M liquidated; no bad debt, per Chaos Labs |
| Apr 18, 2026 | Stolen rsETH posted as collateral to borrow WETH | $123.7M to $230.1M modeled; most collateral recovered |
In the wstETH case, Chaos Labs' post-mortem traced the low price to an offchain process that missed an onchain limit on rate increases.
It counted 10,938 wstETH liquidated across 34 accounts. TokenLogic proposed reimbursing those users from the DAO treasury.
The rsETH event
A forged LayerZero message released 116,500 rsETH from Kelp DAO's bridge. Our Kelp DAO breakdown covers how.
The attacker supplied 89,567 rsETH to Aave and borrowed 82,650 WETH and 821 wstETH, per LlamaRisk's April 20 incident report.
The report states: "Aave's smart contracts were not compromised at any point during this event."
The Protocol Guardian began freezing rsETH and wrsETH reserves across Aave V3 around 19:00 UTC that day.
Bitcoin.com News reported Aave's WETH pool at 100% utilization on April 19, leaving suppliers unable to withdraw.
LlamaRisk modeled two cases:
- All rsETH shares the loss: $123.7M of bad debt.
- L2 rsETH takes it alone: $230.1M, including a 71.45% WETH shortfall on Mantle.
By May 9, liquidations had recovered 106,993 rsETH, 89,567 of it from Aave. LlamaRisk said the 5,211 rsETH the attacker sold "is to be covered by the DeFi United coalition's committed ETH."
TokenLogic proposed a 25,000 ETH contribution to the coalition from the Aave DAO treasury.
On June 1, Aave Labs reported ETH liquidity fully restored, with rsETH still frozen.
Safety Module and Umbrella
Aave's backstop is changing. Its docs say "Umbrella will gradually replace the legacy Safety Module."
The legacy stkAAVE and stkABPT stay active during the transition. Their slashing will be disabled once Umbrella reaches sufficient scale.
Umbrella is "a modular, onchain risk management system that automates bad debt coverage for Aave V3 pools." Here is how it works:
- What you stake: aTokens such as aUSDC, aUSDT and aWETH, or GHO.
- What it covers: bad debt in the same asset only. Staked aUSDC covers USDC.
- When it slashes: automatically, once a deficit passes a first-loss offset the DAO covers.
- How much: up to a staker's full stake in extreme cases.
- Exit: a 20-day cooldown, then a 2-day window. Funds stay slashable during the cooldown.
- Where: Ethereum, for USDC, USDT, WETH and GHO.
The offset is set per asset. For USDT, the DAO covers the first 100,000 USDT of bad debt before stakers lose anything.
Umbrella during the rsETH event
LlamaRisk noted that Umbrella "currently covers Ethereum Core reserves only and does not extend to L2 deployments."
Its WETH module held 23,507.63 WETH, about $54.06M. In the shared-loss case, that could offset part of the Core bad debt.
On April 20, Aave Labs proposed pausing the WETH stake token. While paused, "deposits, withdrawals, transfers, and slashing are blocked," and any use of the funds would need explicit governance action.
Stakers debated the pause and any slashing in the forum thread. Aave Labs called it "a temporary hold while Aave service providers continue to assess the situation."
Risks That Remain
Aave's record points to these risks for lenders and stakers:
| Risk | What it looks like | Seen in |
|---|---|---|
| Collateral | A listed asset loses its backing | rsETH, April 2026 |
| Oracle | A feed misprices collateral and triggers liquidations | wstETH, March 2026 |
| Liquidity | Full utilization blocks withdrawals | WETH, April 2026 |
| Market | A price spike outruns liquidation | CRV, November 2022 |
| Multichain | L2 markets sit outside Umbrella's cover | rsETH scenarios, April 2026 |
| Governance | Votes change parameters, code and backstops | Umbrella pause proposal |
| Contract | A bug in Aave's own code | Not a cause in these events |
WETH suppliers were exposed to rsETH because borrowers could post it against their WETH.
How to Monitor Aave Exposure
Judge a position by its market, not the brand:
- Name the instance. Ethereum Core, Prime and each L2 market carry separate risk.
- List the collateral. Know every asset borrowers can post against what you supply.
- Check each oracle. How is each collateral priced, and can a cap misfire?
- Watch utilization. Near 100%, withdrawals wait on repayments and liquidations.
- Read the backstop. Umbrella module size, offset and pause state for your asset.
- Follow governance. AIPs, Guardian freezes and Risk Steward changes on the forum.
- Alert on control changes. Upgrades, role grants and new Safe signers.
- Stake with the exit in mind. Umbrella's cooldown is 20 days, and slashing still applies.
Our liquid staking risks guide covers the collateral side, from stETH's 2022 discount to LST oracles.
How Guardian Helps Allocators
Guardian's risk ratings for capital allocators underwrite a position on evidence: the deployed code, who controls it, and everything it depends on to stay solvent.
Oracles, bridges, keepers and upstream protocols are "assessed as inherited exposure." That is the path rsETH took into Aave's WETH markets.
Each position gets a score from 0 to 100, with every input visible.
Guardian then keeps watching for upgrades, signer and timelock changes, and swapped oracles. Material moves reach you the day they happen.
Frequently Asked Questions
Is Aave safe after the rsETH exploit?
LlamaRisk found that Aave's contracts were not compromised. Liquidations recovered most of the stolen rsETH, and a coalition committed ETH for the rest. Your own risk depends on the market, its collateral and its withdrawal liquidity.
What is the Aave Safety Module?
It is Aave's original backstop, built on staked AAVE (stkAAVE) and stkABPT. Umbrella is gradually replacing it with staked aTokens and GHO that automatically cover bad debt in the same asset.
Is Aave staking safe?
Umbrella stakers earn rewards for taking losses beyond the DAO's first-loss offset. They can lose up to their full stake, must wait out a 20-day cooldown, and stay slashable while they wait.
Has Aave had bad debt before?
Yes. A CRV position left about $1.6 million in November 2022, later cleared by buying CRV. In April 2026, LlamaRisk modeled $123.7M to $230.1M from rsETH, before liquidations recovered most of the collateral.
Sources
- Aave Docs: Aave V3 Overview
- Aave Docs: Governance
- Aave Docs: Umbrella
- Aave DAO on GitHub: aave-v3-origin, security procedures and audits
- Immunefi: Aave bug bounty (updated April 17, 2026)
- Aave governance forum: rsETH Incident Report, LlamaRisk (April 20, 2026)
- Aave governance forum: Pause stkwaWETH Umbrella Staked Token on Ethereum V3, Aave Labs (April 20, 2026)
- Aave governance forum: [ARFC] rsETH Incident Funding Update, TokenLogic (April 24, 2026)
- Aave governance forum: WETH Unfreeze and LTV Restoration, LlamaRisk (May 9, 2026)
- Aave governance forum: AL Development Update, May 2026, Aave Labs (June 1, 2026)
- Bitcoin.com News: DeFi lender Aave battles withdrawal crisis after KelpDAO rsETH exploit (April 19, 2026)
- Aave governance forum: Post-Mortem: Exchange Rate Misalignment on wstETH Core and Prime Instances, Chaos Labs (March 10, 2026)
- Aave governance forum: wstETH CAPO Oracle Incident User Reimbursement, TokenLogic (March 11, 2026)
- The Block: Aave suffers oracle glitch, triggering $26 million in unfair wstETH liquidations (March 10, 2026)
- CoinDesk: Mango Exploiter Gets Liquidated After Roiling Aave Using $20M of Borrowed Curve Tokens (November 22, 2022)
- Aave governance forum: [ARC] Repay excess debt in CRV market for Aave V2 ETH, Llama and Gauntlet (November 23, 2022)
- Cointelegraph: Aave purchases 2.7M CRV to clear bad debt (January 26, 2023)
- Guardian: Kelp DAO Hack: The rsETH Exploit and What It Means for LRTs
- Guardian: Who Controls DeFi? Admin Keys Behind 25 Top Protocols
- Guardian: TVL Behind Upgradeable Contracts Without a Timelock
- Guardian: DeFi Risk Ratings for Capital Allocators
Underwrite your Aave exposure
Guardian scores each position on its code, controls and dependencies, and tells you the day any of them changes.