Aave V4 Smart Contracts

ChainSecurityFiles named in the report

Audit

ChainSecurity reviewed Aave (Aave V4 Smart Contracts) on 19 Feb 2026: 12 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Aave’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium003
Low009
Medium2 Wei Rounding Can Trigger Liquidations and Create Additional DebtFixed

The report gives no description here.

MediumLiquidation Revert Due to Unrelated Paused Asset in HubFixed

The report gives no description here.

MediumShare Price Can Decrease Because of Fee RoundingFixed

The report gives no description here.

LowArray.sort() Can Revert Due to EVM Stack LimitFixed

The report gives no description here.

LowFees Can Be Minimized by Accruing OftenFixed

The report gives no description here.

LowLiquidation With Deficit Reverts Due to Paused AssetsFixed

The report gives no description here.

LowLiquidations Can Fail Due to Low LiquidityFixed

The report gives no description here.

LowMissing EventsFixed

The report gives no description here.

LowOverflow in Config Key Makes It Possible to Update CF to 0Fixed

The report gives no description here.

LowProfitable Multi-Step LiquidationsFixed

The report gives no description here.

Show 2 more
LowSlippage in LiquidationsFixed

The report gives no description here.

LowSpokes Do Not Return Minted/Burned Share AmountsFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (29)

  • src/spoke/TreasurySpoke.sol
  • src/hub/libraries/SharesMath.sol
  • src/utils/Multicall.sol
  • src/spoke/libraries/LiquidationLogic.sol
  • src/libraries/types/EIP712Types.sol
  • src/position-manager/SignatureGateway.sol
  • src/hub/libraries/Premium.sol
  • src/libraries/math/WadRayMath.sol
  • src/hub/AssetInterestRateStrategy.sol
  • src/position-manager/NativeTokenGateway.sol
  • src/spoke/libraries/UserPositionDebt.sol
  • src/utils/Rescuable.sol
  • src/position-manager/GatewayBase.sol
  • src/spoke/AaveOracle.sol
  • src/misc/UnitPriceFeed.sol
  • src/spoke/SpokeConfigurator.sol
  • src/hub/HubConfigurator.sol
  • src/spoke/libraries/KeyValueList.sol
  • src/hub/libraries/AssetLogic.sol
  • src/utils/NoncesKeyed.sol
  • src/libraries/types/Roles.sol
  • src/libraries/math/MathUtils.sol
  • src/spoke/instances/SpokeInstance.sol
  • src/spoke/libraries/ReserveFlagsMap.sol
  • src/spoke/Spoke.sol
  • src/position-manager/libraries/EIP712Hash.sol
  • src/hub/Hub.sol
  • src/libraries/math/PercentageMath.sol
  • src/spoke/libraries/PositionStatusMap.sol

Part of Aave’s security record

Aave
Audits28 audits by 11 firmsLast audit Jun 2026, by Certora.
Critical findingsNo open critical findingsAcross the 28 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.
IncidentIncident 27 Aug 2024Source: De.Fi incident database.
Open Aave’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us