Deployed reviews
Independent public evidence record
Aave V4 at one exact block.
Inspect real contract addresses, runtime bytecode hashes, implementation slots, official audit sources, and every relationship this record has not proven.
Independent analysis from public sources. This is not an official Aave review, customer relationship, partnership, endorsement, score, or safety conclusion.
Observed on-chain
A fixed snapshot, not a blanket claim.
This independent snapshot uses a partial material scope. It is publicly derived, incomplete, not owner verified, not publicly scored, and not a safety conclusion. It records what Proof of Audits observed at one block and keeps every missing audit, authority, function, and exit relationship open.
Implemented review system
Platform capabilities stay separate from record evidence.
These capabilities come from implemented deployed-protocol tables, services, workflow gates, and public consumers. A capability can exist while this Aave record still lacks the evidence needed to use it.
48 implemented capabilities · Aave evidence may remain open
01 / 480101 · 1/6Drag or swipe
Case and evidence control
Separate record for every version
Evidence from one release cannot silently carry over to a later release.Why it matters
Keep one review tied to one protocol version, with sources that can be checked later.
Implemented platform capabilityIncluded when the accepted scope requires it
Capability 1 of 48: Separate record for every version. Group: Case and evidence control.
Swipe the card or use arrow keys
Audit-to-live code diff
Reports are discovered. Exact coverage still has to be proven.
Discovered review sources10
Open selected primary source Coverage decision workspaceCandidate evidence is not a match
Published auditOfficial reports found
Reviewed artifactCommit/tag not mapped
Live implementation0xfe89…f704 confirmed
Exact coverage requires the reviewed commit, compiler configuration, scope exclusions, reproducible build, and live runtime match.
Evidence gap register
Every missing proof becomes owned work.
G-01CriticalMap every audit report to exact repository commit, files, and exclusions
Audit liaisonOPENG-02CriticalReproduce Core Hub and Main Spoke builds and compare runtime hashes
Build verifierOPENG-03CriticalResolve proxy administrators and governance execution authority
Authority reviewerOPENG-04HighResolve Access Manager, configurator, oracle, position-manager, and gateway implementations
Deployment reviewerOPENG-05HighMap Chainlink feeds, oracle controls, heartbeat, deviation, and fallback behavior
Oracle reviewerOPENG-06HighBind supply, withdraw, borrow, and repay selectors to reviewed functions
Function reviewerOPENG-07HighRun normal, constrained-liquidity, paused, and emergency exit simulations
Exit reviewerOPENG-08HighCollect operator interviews, incident evidence, monitoring receipts, and recovery proof
Evidence leadWAITING ON PROTOCOLInterview status
No interview claimed until the accountable person answers.
01
NOT COLLECTEDGovernance / execution owner
Questions
Who can queue and execute upgrades? What delay and veto paths apply?
Required proof
Executor addresses, timelock config, recent AIP trace
02
NOT COLLECTEDProtocol Security Council
Questions
Which emergency powers exist today, and when do they step down?
Required proof
Signer policy, pause/freeze matrix, incident drill
03
NOT COLLECTEDCore engineering owner
Questions
Which commits produced the live Hub and Spoke implementations?
Required proof
Release tag, compiler settings, build artifacts
04
NOT COLLECTEDOracle / risk owner
Questions
Who changes feeds, caps, premiums, and fallback behavior?
Required proof
Feed registry, role grants, monitoring and escalation
05
NOT COLLECTEDIncident-response owner
Questions
How are users notified, exits protected, and recovery decisions recorded?
Required proof
Runbook, response SLA, drill or observed incident evidence
External ITS v2 decision
Nine buckets visible. Score withheld.
Authority, upgrade and team history
UNKNOWN_INSUFFICIENT_EVIDENCEUser funds and exit rights
UNKNOWN_INSUFFICIENT_EVIDENCEProtection, monitoring and backstops
UNKNOWN_INSUFFICIENT_EVIDENCEAudit reality and current-code proof
UNKNOWN_INSUFFICIENT_EVIDENCECare and accountability
UNKNOWN_INSUFFICIENT_EVIDENCELive change and upgrade discipline
UNKNOWN_INSUFFICIENT_EVIDENCEIncident response and user recovery
UNKNOWN_INSUFFICIENT_EVIDENCEOur team user-care review
UNKNOWN_INSUFFICIENT_EVIDENCEVerified investor and user signal
UNKNOWN_INSUFFICIENT_EVIDENCEComplete feature output
Every evidence track shows proof, limitation, and next decision.
01
OBSERVED
Current-code proof
Runtime bytecode was read for eight material contracts at one exact Ethereum block. The Core Hub and Main Spoke EIP-1967 implementation slots matched the scoped implementations.
Evidence state recorded
02
PUBLIC SOURCES
Audit coverage
Ten reports are present in the official Aave V4 audit directory. Exact report-to-commit, file, and deployed-contract coverage still requires a formal mapping.
Evidence state recorded
03
OPEN
Authority graph
The Access Manager root is in scope. Role holders, proxy administration, and the governance execution path remain unresolved in this independent record.
Requires independent resolution
04
NOT PROVEN
User exits
Supply, withdraw, borrow, and repay are declared actions. Function selectors, liquidity constraints, emergency behavior, and simulations are not yet approved evidence.
Requires independent resolution
05
NOT COLLECTED
Operator interviews
No Aave operator interview is claimed. A formal review would request accountable owners for governance, emergency, oracle, upgrade, and incident-response decisions.
Requires independent resolution
06
OPEN
Change discipline
This record fixes one reference block. Later upgrades, new Spokes, cap changes, and authority changes require a new scope version and freshness decision.
Requires independent resolution
07
OPEN
Incident and recovery
Preparedness, observed response, user recovery, and drill evidence must be assessed separately. Public statements are not treated as approved criterion evidence.
Requires independent resolution
08
BLOCKED
Publication
Partial material scope cannot produce a public score badge. Unknown critical deployment effects block publication until independently resolved.
Requires independent resolution
Deployment graph
Material contracts stay inspectable.
ComponentContractRuntime hashObserved state
Core Hubcritical · 1,419 runtime bytesimplementation 0xfe89fd96f270ac3c0f11921af0390dbb1340f704
0xcca852bc…8ce826c90x6fe3bd0c49…cd595d1d63Implementation slot confirmedMain Spokecritical · 1,419 runtime bytesimplementation 0xabd0e26fe17bde4f1f1187ed8aa80c274e03d8b5
0x94e7a5dc…2f56c4850xd5a0f33aee…3ad117b542Implementation slot confirmedAccess Managercritical · 21,008 runtime bytes
0x08ae3be3…a87fdf010x34f8bd1e19…2a538f92e8Runtime observed; authority graph openHub Configuratorhigh · 13,833 runtime bytes
0x1f075348…e0525c3d0x12b260d3b0…c50c76ecbfRuntime observed; audit mapping openSpoke Configuratorhigh · 11,825 runtime bytes
0x9bfff48b…efa5389a0xb0e1af0d5b…0d6f80c8a5Runtime observed; audit mapping openMain Spoke Oraclehigh · 2,396 runtime bytes
0x99b2b6ce…212a61270x9f0daa8269…756020c009Runtime observed; dependencies openConfig Position Managerhigh · 13,330 runtime bytes
0x51305839…052d575c0x8449f037d3…a3325bcb57Runtime observed; function mapping openNative Token Gatewayhigh · 8,787 runtime bytes
0xe68ab4f9…bbbe42be0x9d4b0f4097…7543e6453fRuntime observed; function mapping openProvenance
Claims link back to primary evidence.
Aave V4 live announcementAave V4 activation and ongoing risk updatesAave V4 source repositoryPublished Aave V4 audit directoryAave V4 documentationProof of Audits capture block
Want this evidence record for your live protocol?
Apply for one of 10 sponsored founding baselines. Your team reviews the completed record and decides whether to authorize publication; findings remain independent.