FORESHOCK

Protocols

Request coverage

Only protocols with enough independently verified data to trust a score appear here. This is a permanent rule, not a temporary gap.

How protocols get listed: a protocol is added once it clears the same sufficiency threshold as everything else here. Which protocol gets curated next is ordered by TVL rank and by demand from coverage requests, so a request can move a protocol up the queue.

Aave V1

confidence low· verified weight 80% · updated 2026-07-26 · methodology 0.7.0

ChainsEthereumAave V1official site →

Confidence capped at low:

  • this methodology version hasn't been backtested against any historical incidents in this protocol's bucket yet
  • not because this protocol's data is thin (80% of category weight is verified data)
Why this rating
The highest-signal researched categories behind this assessment.

Audit profile

verified

2 audits/contests on record, most recent (OpenZeppelin, 2020-01-15) has unread findings, scored as unknown, not assumed clean.

Dependency risk

verified

uses 1 oracle.

TVL profile

verified

TVL change (4%) is within a stable range.

Governance attack surface

verified

top 10 holders control 15.16%, adjusted figure may still include pooled custody (untagged exchanges, infrastructure contracts) due to tagging coverage limits; exclusions require positive identification.

Historical incidents

verified

no known own or inherited incidents.

Risk-reducing factors
Researched findings that lower this protocol's assessed risk.

Historical incidents

no known own or inherited incidents.

Bug bounty

has a bug bounty program, up to $1 000 000, hosted on immunefi.

Governance attack surface

top 10 holders control 15.16%, adjusted figure may still include pooled custody (untagged exchanges, infrastructure contracts) due to tagging coverage limits; exclusions require positive identification.

Protocol age

1499 days live, past the ~1yr floor; treated the same as any older protocol, not scored progressively safer with more age.

TVL profile

TVL change (4%) is within a stable range.

Dependencies
  • uses 1 oracle
Incident history

No material incidents on record.

Audit history
  • OpenZeppelin 2020-01-15

    Findings not confirmed in this research pass.

  • Trail of Bits 2019-09-25

    Findings not confirmed in this research pass.

This assessment follows Foreshock's published methodology. Exact category weights, scoring rules, thresholds, and aggregation logic are proprietary and not shown here. How to interpret this assessment

Do you hold a position in this protocol?

Get an email when this assessment materially changes.

Monitor this protocol
Aave V1 · Foreshock