Aave V4 completes 345-day, $1.5 million security review with no high-severity issues

Aave Labs said the Aave V4 protocol completed a 345-day security review costing $1.5 million, with no high-severity vulnerabilities reported by auditors including ChainSecurity, Trail of Bits and Blackthorn. The review combined manual audits, formal verification, invariant testing, fuzz testing and a six-week public security contest that drew over 900 participants submitting more than 950 reports. Aave V4's new hub-and-spoke modular design reduced the codebase versus V3 and improved audit efficiency, while Aave Labs said it will maintain its formal verification framework and run an ongoing bug bounty program.