Aave Starknet Bridge
Nethermind Security reviewed Aave (Aave Starknet Bridge) on 12 Sep 2022: 11 findings, 2 critical; 8 marked fixed, 3 acknowledged.
2 critical findings, fixed
Findings29
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 0 |
| Medium | 0 | 3 | 0 |
| Low | 0 | 0 | 6 |
CriticalContract can be initialized multiple timesFixed
The report gives no description here.
CriticalContract can be initialized multiple timesFixed
The report gives no description here.
LowMissing Ethereum address bounds check in bridge.bridge_rewards(...)Fixed
The report gives no description here.
LowMissing input validation in incentivized_erc20_set_l2_bridge(...)Fixed
The report gives no description here.
LowMissing input validation in proxy.change_proxy_admin(...)Fixed
The report gives no description here.
LowMissing input validation in proxy.initialize_proxy(...)Fixed
The report gives no description here.
LowMissing input validation in rewAAVE.initialize_rewAAVE(...)Fixed
The report gives no description here.
LowPossible invalid state when tokens are set without ownershipFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Aave’s security record
AaveAudits36 audits by 14 firmsLast audit Jun 2026, by Certora.
Critical findingsNo open critical findingsAcross the 36 reports, 8 critical findings were reported. Each is marked fixed by the firm that reported it.
IncidentIncident 27 Aug 2024Source: De.Fi incident database.
Open Aave’s security recordSecurity firm
Nethermind Security79 projects reviewed · 145 reports · latest Oct 2026
See Nethermind Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us