chaindrainMVP
Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Aave

Lending, Money Markets & CDPsmedium·risk 0.4986·TVL $7.2M·blast $7.2M·active
websitegithubtwitterdiscord
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Lending, Money Markets & CDPs
Subsector tags
infra_tooling, consumer_app, general_defiDemo
Chain deployments
Ethereum
Website
https://www.aave.xyzDemo
Launch date
Jun 18, 2022
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
0x7fc66500c84a76ad7e9c93437bfc5ac33e2ddae9
Proxy pattern
transparent
Upgrade authority
contract
Multisig threshold
—
Compiler
0.8.19
Uses assembly
noDemo
Bug bounty
immunefiDemo
Contract addresses
0x7fc66500c84a76ad7e9c93437bfc5ac33e2ddae9Demo
Audits tier
2

Dependency

Oracle providers
Chainlink
Bridge dependencies
—
Stablecoin dependencies
DAI, GHO, USDC, USDT
LST / LRT deps
—Demo
DEX liquidity venues
velodrome, uniswap_v3Demo
CEX listings
kucoinDemo
Custodian
—Demo
KMS provider
gcp_kmsDemo
RPC provider
infuraDemo
Frontend host
vercelDemo
npm lockfile sha
sha256:12f4b81c7f5c73b0e70f9d0366a49e9e312e291e617076c9dc983c10405c5534Demo

Governance

Governance type
token_votingDemo
Governance token
0x394ddfcb61222529c9019866342fbfa411d7e651Demo
Treasury size
$330.8KDemo
Team size
24Demo
Jurisdiction
BVIDemo
Incorporated entity
Aave DAO LLCDemo
Anonymous team
noDemo
Security disclosure
noDemo
IR SLA (hours)
—Demo

Reputation

GitHub
https://github.com/aave/aaveDemo
Commit velocity (30d)
13Demo
Contributors
16Demo
Twitter
@aaveDemo
Discord
https://discord.gg/1lu0dv1Demo
Last incident
Oct 15, 2020Demo
KYT screening
cleanDemo

Threat History

1 recorded incident
signature malleabilityprotocolunknownDemo
$293.9K

On 2020-10-15, Aave suffered a signature malleability incident resulting in approximately $293,882 in losses. The exploit targeted the protocol layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0004
View incident →Bounty live

Peer Incidents · Method B

12 root-cause predicate matches

Vulnerable to: reentrancy

Matches the reentrancy predicate

28 historical peer events
  • SommelierDemo
    $30.7M
  • Kyber NetworkDemo
    $2.1M
  • DeribitDemo
    $936K
  • Zora NetworkDemo
    $4.7M
  • Stader LabsDemo
    $16.1M
  • + 23 more

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

18 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • OrcaDemo
    $180.8K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • + 13 more

Vulnerable to: flash loan governance

Matches the flash loan governance predicate

18 historical peer events
  • ThirdwebDemo
    $33.2M
  • LayerZero Labs (physical verification context only)Demo
    $40.2M
  • First Digital USDDemo
    $12.1M
  • Protocol-Native Treasury Agents (DAO-embedded)Demo
    $13.8M
  • F2PoolDemo
    $3.5M
  • + 13 more

Vulnerable to: ice phishing approval

Matches the ice phishing approval predicate

16 historical peer events
  • deBridgeDemo
    $7.5M
  • EulerDemo
    $87.9K
  • Bend DAODemo
    $968.9K
  • Maple FinanceDemo
    $1.4M
  • BlurDemo
    $6.5M
  • + 11 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events
  • Bridge.xyz / StripeDemo
    $10.4M
  • UK FCA Digital SandboxDemo
    $3.6M
  • Three SigmaDemo
    $2.7M
  • CryptoQuantDemo
    $517.3K
  • Celsius (defunct)Demo
    $22M
  • + 7 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: kms misconfiguration

Matches the kms misconfiguration predicate

9 historical peer events
  • Stably, Inc. (issuance via regulated partners depending on program)Demo
    $505K
  • MatrixdockDemo
    $4.3M
  • EulerDemo
    $3.6M
  • NosanaDemo
    $1.7M
  • Tron FoundationDemo
    $1.3M
  • + 4 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: signature malleability

Matches the signature malleability predicate

7 historical peer events
  • Ether.fiDemo
    $17.2M
  • Swell NetworkDemo
    $1.2M
  • Immutable protocolDemo
    $4M
  • The SandboxDemo
    $3.9M
  • PancakeSwapDemo
    $656.7K
  • + 2 more

Vulnerable to: regulatory seizure

Matches the regulatory seizure predicate

6 historical peer events
  • RaydiumDemo
    $1.9M
  • CoinDCXDemo
    $29.8M
  • Silo FinanceDemo
    $14M
  • Base BridgeDemo
    $8.3M
  • EigenDADemo
    $101M
  • + 1 more

Vulnerable to: governance proposal malicious

Matches the governance proposal malicious predicate

5 historical peer events
  • Stripe CryptoDemo
    $1.5M
  • Notional V3Demo
    $507.1K
  • Hong Kong Monetary Authority — Ethereum pilotsDemo
    $18.9M
  • FalconXDemo
    $4.8M
  • AvailDemo
    $30.8M

Vulnerable to: prompt injection agent

Matches the prompt injection agent predicate

4 historical peer events
  • LodestarDemo
    $3.2M
  • Ether.fi CashDemo
    $4.6M
  • HTX (Huobi)Demo
    $3.7M
  • SwellDemo
    $403K

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Euler

Lending, Money Markets & CDPs · low
Ensemble
0.558
A · Jaccard0.31
B · Overlap3
C · Cosine0.75
Matches on
  • subsector_tags = general_defi, infra_tooling
  • oracle_providers = Chainlink
  • chain_deployments = Ethereum
  • method_b_root_causes = signature_malleability, kms_misconfiguration, ice_phishing_approval
#2

Ether.fi Cash

Lending, Money Markets & CDPs · high
Ensemble
0.492
A · Jaccard0.28
B · Overlap2
C · Cosine0.83
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, general_defi, infra_tooling
  • oracle_providers = Chainlink
  • chain_deployments = Ethereum
#3

Radiant Capital

Lending, Money Markets & CDPs · medium
Ensemble
0.490
A · Jaccard0.30
B · Overlap2
C · Cosine0.80
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, infra_tooling, general_defi
  • oracle_providers = Chainlink
  • chain_deployments = Ethereum
#4

Immutable protocol

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.483
A · Jaccard0.32
B · Overlap2
C · Cosine0.76
Matches on
  • subsector_tags = consumer_app, general_defi, infra_tooling
  • oracle_providers = Chainlink
  • chain_deployments = Ethereum
  • method_b_root_causes = signature_malleability
#5

Governed protocol (monetary policy–driven)

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.468
A · Jaccard0.42
B · Overlap1
C · Cosine0.87
Matches on
  • kms_provider = gcp_kms
  • frontend_host = vercel
  • subsector_tags = infra_tooling, general_defi, consumer_app
  • oracle_providers = Chainlink
#6

Sanctum

Liquid Staking & Restaking · critical
Ensemble
0.467
A · Jaccard0.27
B · Overlap2
C · Cosine0.75
Matches on
  • frontend_host = vercel
  • subsector_tags = general_defi, consumer_app
  • oracle_providers = Chainlink
  • method_b_root_causes = reentrancy
#7

Swell

Liquid Staking & Restaking · medium
Ensemble
0.450
A · Jaccard0.31
B · Overlap2
C · Cosine0.66
Matches on
  • subsector_tags = consumer_app, general_defi
  • oracle_providers = Chainlink
  • chain_deployments = Ethereum
  • method_b_root_causes = dvn_collapse, prompt_injection_agent
#8

JustLend

Lending, Money Markets & CDPs · high
Ensemble
0.434
A · Jaccard0.12
B · Overlap2
C · Cosine0.80
Matches on
  • subsector_tags = consumer_app, general_defi, infra_tooling
  • method_b_root_causes = reentrancy
  • stablecoin_dependencies = USDC, USDT, DAI
#9

Ether.fi

Liquid Staking & Restaking · high
Ensemble
0.433
A · Jaccard0.21
B · Overlap2
C · Cosine0.70
Matches on
  • frontend_host = vercel
  • subsector_tags = infra_tooling, general_defi, consumer_app
  • oracle_providers = Chainlink
  • chain_deployments = Ethereum
#10

Base Bridge

Cross-Chain Bridges & Messaging · critical
Ensemble
0.431
A · Jaccard0.16
B · Overlap2
C · Cosine0.74
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, infra_tooling, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, regulatory_seizure