Aave Safetymodule security review

Sigma PrimeCode version: not recorded (see the report)

Audit · firm’s term: security review

Sigma Prime reviewed Aave (Aave Safetymodule security review) on 1 Feb 2023: 4 findings, 1 critical; all marked fixed.

1 critical finding, fixed
Open the reportOpen Aave’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High000
Medium001
Low002
CriticalAttacker May Steals Stake in stakeWithPermit()Fixed

The report gives no description here.

MediumReturning Funds when totalShares is Zero May Lead to Denial of Ser- vice & Lock FundsFixed

The report gives no description here.

LowIncorrect Input of configureAssets() May Increase Users’ RewardsFixed

The report gives no description here.

LowSlashing Potentially Causes Rounding ErrorFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Aave’s security record

Aave
Audits28 audits by 11 firmsLast audit Jun 2026, by Certora.
Critical findingsNo open critical findingsAcross the 28 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.
IncidentIncident 27 Aug 2024Source: De.Fi incident database.
Open Aave’s security record

Security firm

Sigma Prime

16 projects reviewed · 37 reports · latest Aug 2026

See Sigma Prime’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us