Aave Security Status, Audits & Auditors

Issues (176)

	Low	Medium	High	Critical	Total
Not fixed	20	8	3	-	31
Acknowledged	31	4	1	-	36
Fixed	74	18	11	6	109
Total	125	30	15	6	176

Reported rekts

This project has no active rekts.

Audits (26)

#	Name	Auditor	Date	Chains	Issues
1	Aave StableVault	Certora	2026/06/30	Off-Chain (Private)	No active critical issues
2	Aave V4 Tokenization Spoke	ChainSecurity	2026/02/24	Off-Chain (Private)	No active critical issues
3	Aave V4 Smart Contracts	ChainSecurity	2026/02/19	Off-Chain (Private)	No active critical issues
4	Aave security review	Pashov Audit Group	2025/12/03	Off-Chain (Private)	No active critical issues
5	Aave CowSwap Adapters	ChainSecurity	2025/11/25	Off-Chain (Private)	No active critical issues
6	Immutable aToken Vault	ChainSecurity	2025/08/19	Off-Chain (Private)	No active critical issues
7	Vault Revenue Splitter	ChainSecurity	2025/08/18	Off-Chain (Private)	No active critical issues
8	Aave Umbrella	Ackee Blockchain Security	2025/03/03	Off-Chain (Private)	No active critical issues
9	Aave V3.2 audit	Pashov Audit Group	2024/09/15	Off-Chain (Private)	No active critical issues
10	Aave v3.2 Liquid eModes	OXORIO	2024/09/12	Off-Chain (Private)	No active critical issues

Contracts (124)

#	File Name
21	src/spoke/libraries/UserPositionDebt.sol
22	src/utils/Rescuable.sol
23	src/position-manager/GatewayBase.sol
24	src/spoke/AaveOracle.sol
25	src/misc/UnitPriceFeed.sol
26	src/spoke/SpokeConfigurator.sol
27	src/hub/HubConfigurator.sol
28	src/spoke/libraries/KeyValueList.sol
29	src/hub/libraries/AssetLogic.sol
30	src/utils/NoncesKeyed.sol

...

Get your label

Is this your project? Add a free label to your website. It shows the audits published on Trustblock, with the latest firm and date, and links to this page. It updates by itself.

1<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
2<div
3  data-tb-project-widget
4  data-tb-project-slug="aave"
5  data-tb-variant="label"
6  data-tb-color="light"
7></div>

Audits (26)

#	Name	Auditor	Date	Chains	Issues
1	Aave StableVault	Certora	2026/06/30	Off-Chain (Private)	No active critical issues
2	Aave V4 Tokenization Spoke	ChainSecurity	2026/02/24	Off-Chain (Private)	No active critical issues
3	Aave V4 Smart Contracts	ChainSecurity	2026/02/19	Off-Chain (Private)	No active critical issues
4	Aave security review	Pashov Audit Group	2025/12/03	Off-Chain (Private)	No active critical issues
5	Aave CowSwap Adapters	ChainSecurity	2025/11/25	Off-Chain (Private)	No active critical issues
6	Immutable aToken Vault	ChainSecurity	2025/08/19	Off-Chain (Private)	No active critical issues
7	Vault Revenue Splitter	ChainSecurity	2025/08/18	Off-Chain (Private)	No active critical issues
8	Aave Umbrella	Ackee Blockchain Security	2025/03/03	Off-Chain (Private)	No active critical issues
9	Aave V3.2 audit	Pashov Audit Group	2024/09/15	Off-Chain (Private)	No active critical issues
10	Aave v3.2 Liquid eModes	OXORIO	2024/09/12	Off-Chain (Private)	No active critical issues

#	File Name
21	src/spoke/libraries/UserPositionDebt.sol
22	src/utils/Rescuable.sol
23	src/position-manager/GatewayBase.sol
24	src/spoke/AaveOracle.sol
25	src/misc/UnitPriceFeed.sol
26	src/spoke/SpokeConfigurator.sol
27	src/hub/HubConfigurator.sol
28	src/spoke/libraries/KeyValueList.sol
29	src/hub/libraries/AssetLogic.sol
30	src/utils/NoncesKeyed.sol

...

Aave

Issues (176)

Same error description for different errors within the setEModeCategory function in PoolConfiguratornot_fixed/low

Compromised Guardian Can Block the Executornot_fixed/low

Dangerous Delegatecallsnot_fixed/low

Function Signature as String, Unicode Charsetnot_fixed/low

Potential Reentrancy on executenot_fixed/low

Reported rekts

Audits (26)

Contracts (124)

Get your label

Audits (26)