Token Metrics data shows LINK trading near $7.67 with a bearish technical trend as Aave founder Stani Kulechov announced a binding four-layer risk framework prepared by LlamaRisk in response to the $292 million KelpDAO exploit. The framework governs assets across Aave V3, V4, and Horizon, mandating a $50,000 bug bounty floor and three-verifier bridge minimum. This marks Aave’s first structural governance overhaul following April’s incident that created up to $230 million in bad debt.<\/p>\n
Aave, the DeFi lending giant, has been scrambling to shore up its defenses since April’s devastating KelpDAO bridge exploit. Attackers exploited a single-verifier configuration in KelpDAO’s LayerZero-powered bridge, minting 116,500 unbacked rsETH tokens worth about $292 million. The bad actor then deposited these tokens as collateral on Aave and borrowed roughly $193 million. Leaving the protocol facing potential losses between $124 million and $230 million depending on how the damage gets socialized.<\/p>\n
The incident exposed critical flaws in how Aave assesses third-party assets, particularly those moving across bridges. The protocol’s risk framework had allowed assets with minimal verification to enter the world, creating a vulnerability that attackers exploited. This wasn’t just a technical failure but a governance breakdown. As existing rules didn’t prevent single-point-of-failure bridge configurations from putting massive amounts of Aave capital at risk.<\/p>\n
Now Aave is fighting back with a comprehensive overhaul. The new proposal, crafted by risk firm LlamaRisk, represents the first concrete structural governance response to the exploit. It’s not just guidelines \u2013 it’s binding rules that will govern every asset lifecycle decision across Aave V3, V4, and Aave Horizon going forward. The framework applies at onboarding, during quarterly due diligence refreshes, at material-change re-evaluations, and when making parameter or deprecation decisions.<\/p>\n\t\t