LlamaRisk

Always-On Security for Decentralized Finance.

[LlamaRisk @LlamaRisk]

LlamaRisk has published an ARFC proposing a new standardized Risk Framework that governs all assets on @Aave V3, V4, and Aave Horizon.

The framework establishes standards for evaluating asset, bridge, and chain-level risk criteria, and for monitoring and automated risk management systems.

[LlamaRisk @LlamaRisk]

Read here: https://t.co/KP87u4mQXJ

[LlamaRisk @LlamaRisk]

LlamaRisk has published an ARFC proposing a new standardized Risk Framework that governs all assets on @Aave V3, V4, and Aave Horizon.

The framework establishes standards for evaluating asset, bridge, and chain-level risk criteria, and for monitoring and automated risk management systems.

[Vault Summit @Vault__Summit]

Risk conditions evolve in real time. The infrastructure managing them should too.

Adam Sadowski (@WormholeOracle) from @LlamaRisk on the limitations of current DeFi risk response paths and what a unified risk layer looks like in practice:

[LlamaRisk @LlamaRisk]

Update on the IPOR crvUSD vaults

Llamarisk crvUSD Optimizer vaults were initially launched to help stabilize lending rates across the different LlamaLend markets and scrvUSD, while serving as an easy entry point for end users. Throughout, LlamaRisk never earned any fees on these vaults. At their peak, they reached a combined TVL of over $1M, and in our view, contributed to crvUSD liquidity during the depeg.

With TVL largely gone and remaining funds already idle in crvUSD, we're now closing out both vaults (deployed on Mainnet and Arbitrum). Their supply caps are set to 0.1 crvUSD and allocations have been paused. All funds currently sit in crvUSD and are no longer earning yield.

Funds currently remain withdrawable, subject to protocol conditions: https://t.co/sNFyBoO9eA https://t.co/XPd8IZvPoa

[LlamaRisk @LlamaRisk]

@chainlink happy birthday team!

[Stable Summit 🦫 @stable_summit]

Institutional interest is not institutional readiness. This panel brings together some of the practitioners closest to solving it to discuss what it actually takes to deploy stablecoins at scale.

On stage:
@CharlesJansen, @SPGlobal
Charles Michallet, @SocieteGenerale
@0xt0n1, @m0
@WojtekP, @AccountableData

Moderator: @WormholeOracle, @LlamaRisk

June 4, New York · https://t.co/MkdA2Qutjm

[Stable Summit 🦫 @stable_summit]

DeFi protocols can only scale if they are secure. LlamaRisk is building the risk infrastructure that makes that possible.

@WormholeOracle, Founder and CEO at @LlamaRisk, will take the stage at Stable Summit IV: NYC.

New York · https://t.co/LzmB6HCJ0b

[Aave @aave]

Aave’s bug bounty program has been updated to better align payouts with the risk profile of each part of the ecosystem and to simplify review paths.

Payout caps for critical bugs are now five times larger for Aave V4 and Core Aave V3.​​​​​​​​​​​​​​​​

Details below.

[LlamaRisk @LlamaRisk]

The Risk Layer of DeFi is powered by #LlamaGuard

[Stable Summit 🦫 @stable_summit]

"For the first time ever, off chain dependencies that DeFi protocols rely on to operate safely and reliably don't have to be delegated to a third party service provider," @WormholeOracle, Founder and CEO of @LlamaRisk at @stable_summit.

[Stani @StaniKulechov]

Past days has been extremely hardcore for our team and DeFi in general. DeFi went trough a substantial stress test and the consequences were felt. It definitely was the hardest couple of weeks that I experienced in my life and during the past decade building in the space. I am still writing this with couple of hours of sleep per day so bear with me.

For me personally, the rsETH bridge incident was unfortunate as our team and community has put so much effort into securing the protocol and seeing the exploit happening outside of the protocol smart contracts, and affecting the markets is hard to watch even when the markets had (and still have) full backing like Mainnet Core. That being said, Aave has seen multiple market/credit cycles and always has been able to prove its resiliency. I have more confidence in DeFi today than ever, not because of the industry is stepping up and improving security practices, but because there is a true community behind DeFi that is willing to help and do whatever it takes to ensure our space has future.

I want to say that during all this madness there were lot of people that were extremely supportive and proactive to mitigate any issues and contagion. At the first glance, from Aave's perspective we were positive that we would find a resolution and we had overall balance sheet, protocol revenue and external/public support to over come the issue from Aave's perspective but what we understood is that the issue was beyond Aave. It was about restoring the whole state of DeFi, avoid contagion and ensuring that the whole ecosystem overcome this incident not solely Aave.

DeFi United started as an initiative from DeFi protocols that were affected but eventually became an industry wide movement to save DeFi and bring protocols together. I am grateful for all the contributions and support that everyone has been providing and can say that this wouldn't be possible without it. I'd hope that DeFi United becomes a permanent movement in some shape or form with the right form factor. DeFi United was executed at insane speed and other constraints but there could be a model that could continuously support the industry from the unexpected.

I'd say during the past week lot of people stood up and I really don't have the space to mention everyone (you know who you are) but specifically I want to say that @MikeSilagadze deserves more respect from the space than anyone else atm, he went above and beyond and was willing to sacrifice a lot to solve what actually wasn't something cause by his efforts. Full respect.

@LidoFinance team also deserve special credit, this team truly cares about DeFi and was extremely helpful along the way. They deserve full credit.

@gdog97_ deserves credit as well, who helped to brainstorm various solutions and also stepping in with Ethena and helping on coordination.

@arbitrum community for doing the right thing and rescuing the funds from the bridge contract that was a difficult but the right call.

@Mantle_Official @Bybit_Official team for stepping up as well and showing strong support. The team has been supportive and truly cares about making the space safe.

Last but not least lot of credit goes to @ethereumJoseph who really stepped in to help DeFi and the ecosystem. Joe cares about Ethereum, he cares about DeFi and understand the importance of DeFi for the future of Ethereum.

We have truly good people within our community.

These folks are true guardians of our space (among others on my long list) that really want DeFi to win.

I feel very optimistic now about our space, it is true that events like these can be a setback but in reality it builds resiliency, which our space stands for, and over time that is hard to beat by legacy systems.

The past week we had to operate in multiple different constraints from time, information, resources, governance and other. We had to move as fast as we could as time was against us. It was a large coordination effort that we haven't experienced so far. I'd like to give most of this credit to our team and community especially @Token_Logic and @LlamaRisk who went also above and beyond to find resolutions and coordinate.

There has been some banter about right type of market structure for onchain lending between shared or isolated pools but the reality is that when capital moves, it moves at scale and market structures are less of a mitigating factor. These kinds of times require to find solutions fast and reestablish the trust in the markets and the technology, that's whats important.

All this being said there are some great learnings from this indecent like from any incident and we as any other team involved will share a post mortem and steps to improve anti-fragility. I might be now less bullish on onchain lending as infrastructure and more leaning towards a model where the market structures need to be backed by strong balance sheets and risk transfers, however this is another discussion for the future as issues can stem outside of the protocol's control.

Now as the markets on Ethereum mainnet Core are restoring, our team continues to execute the technical plan to restore rest all the markets.

Thank you for everyone who has been supportive and we will keep you up to date as we progress.

DeFi United.

[LlamaRisk @LlamaRisk]

The joint effort striving to fully recapitalize @KelpDAO rsETH speaks to the shared accountability of leaders in our industry; to serve the common good first and foremost.

We are proud to be working together with @aave labs, @Token_Logic, @chainlink, and @Certora as an Aave Service Provider. The rapid response and tight coordination of Aave SPs in a time of need helped make this possible.

In spite of the intense pressure, DeFi comes together to put users first. There’s a long road ahead and it will not be easy, but we stand united.

DeFi will win.

[Aave @aave]

Aave service providers and ecosystem partners have established a recovery fund that factors in pending DAO votes, including the Arbitrum governance vote, indicative agreements, and successful execution to restore rsETH’s full backing.

We are DeFi United, and resolving this for affected users and the broader DeFi ecosystem is our top priority.

We have aligned with @KelpDAO and @LayerZero_Core on the technical steps required to execute our plan. That work is now moving forward.

Thank you to everyone who contributed to DeFi United and to the thousands of community members who stood with us throughout. Watching the DeFi community come together has been genuinely inspiring.

The final recovery plan, steps for users, and further updates will follow shortly.

[Aave @aave]

Aave service providers have been leading the DeFi United effort to restore rsETH's backing since the April 18 incident.

We believe ecosystem collaboration matters most in moments like this, and our priority is achieving the strongest possible available outcome for users.

Multiple strong indicative commitments are now in place to join this effort toward restoring the backing of rsETH. This includes @LidoFinance, whose contributors have published a proposal today to their DAO to participate in the joint recovery effort.

Lido is one of many partners who are stepping up. We will continue to announce further commitments as they are formalized.

[Aave @aave]

Update on rsETH incident:

@LlamaRisk has published a report outlining the rsETH incident, the immediate actions taken, its impact on Aave, and potential paths forward.

All service providers have been working to assess the two potential bad debt scenarios on the Aave protocol.

Aave DAO service providers are also leading an effort with ecosystem participants to address any bad debt. This effort already has several indicative commitments from various parties and we are grateful for the strong support we have received so far.

We will share further updates as we have them.

In the meantime, the full report can be read here: https://t.co/jy3BHZCa7b

[Aave @aave]

Supply caps across several assets on Aave V4 have been reached again.

@LlamaRisk proposed another cap increase to accommodate demand.

Security first: V4 deposit caps start conservative by design. As caps fill, risk managers evaluate and propose increases to meet demand.

[LlamaRisk @LlamaRisk]

3 / Read the full update ↓
https://t.co/VobtQ3vRWJ

[LlamaRisk @LlamaRisk]

@aave Horizon week 32

⟢ TVL: $364.8M ($212.6M stables)
⟢ Net Borrows: $111.7M

TVL increased as activity picked up. RLUSD & USCC lead supply. RLUSD incentives at 3.5% APR, USDC borrow incentives at 1.75% APY. Borrowing increased, driven by new USTB-backed demand.

[LlamaRisk @LlamaRisk]

2 / Horizon RWA activity strengthened, with new USTB inflows and borrowing. Lower borrow costs continue to support leveraged RWA strategies.

[LlamaRisk @LlamaRisk]

Security done right.

@aave is in safe hands with @Certora.

[Mooly Sagiv @SagivMooly]

https://t.co/ZxFGETPLlR

[LlamaRisk @LlamaRisk]

9 / LlamaRisk’s position is straightforward:

V4 should scale by widening parameters where the architecture, live market behavior, and operating controls justify it, carefully introducing new features like credit lines, risk premiums, dynamic liquidation, and reinvestment policy.

That requires continuous risk coverage and protocol-owned infrastructure.
That is how Aave V4 should grow.

[LlamaRisk @LlamaRisk]

@aave V4 should be scaled through tightly governed risk expansion.

That means conservative initial caps, bounded credit allocation, and spoke-by-spoke parameterization from day one.

This is how a protocol with powerful primitives is launched responsibly.

More below ↓

[LlamaRisk @LlamaRisk]

8 / Risk oracles are the next layer in Aave’s evolution.

LlamaRisk starts with manual Risk Stewards to ensure full coverage from day one, then scales into automated, protocol-owned risk management through LlamaGuard.

That is how V4 turns risk into infrastructure.