On October 29, 2026, a significant security incident involving a Binance hot wallet compromise prompted Aave's risk management framework to take swift defensive action. The protocol's governance and risk stewards responded by freezing reserves across Aave V3 and the newer Aave V4 infrastructure, triggering a broader reassessment of exposure limits. LlamaRisk, the leading risk management entity supporting Aave, subsequently proposed a structured reduction in borrowing capacity designed to recalibrate the protocol's risk profile in light of the exploit and its aftermath.
The recommended framework targets the largest denominated reserves across Aave's multi-chain deployment, setting new borrow and draw caps at approximately 2% above the amount actively borrowed at the moment of the incident. This conservative approach aims to prevent recursive liquidations and sudden liquidity shocks while maintaining meaningful protocol functionality. The changes apply exclusively to positions exceeding $10 million in pre-exploit borrowed volume and possessing at least $10 million of remaining capacity—effectively targeting systemic-scale exposures. Core protocol positions underwent the most dramatic adjustments: WETH borrowing capacity fell from 2.4 million to 1.79 million tokens on Aave V3 Core, while stablecoin positions saw proportional reductions across USDT, USDC, and DAI. Bitcoin-denominated collateral also faced meaningful constraints, with WBTC and cbBTC borrow caps compressed by roughly 50 percent.
The reductions extend across Aave's entire chain ecosystem—from Ethereum's Core and specialized instances like Prime and Plasma, to Layer 2 deployments on Arbitrum and Base, and emerging execution environments including Monad and Mantle. Stablecoin derivatives like USDe experienced particularly aggressive cuts, reflecting heightened concern around algorithmic asset stability during periods of market stress. This tiered approach demonstrates Aave's recognition that different blockchains and asset classes carry distinct risk profiles, even within a unified governance framework. Rather than implementing uniform caps globally, the protocol's risk stewards calibrated adjustments to preserve operational viability on smaller chains while applying stricter controls where capital concentration posed the greatest systemic risk.
These capacity reductions represent a deliberate trade-off between security and composability—users seeking to borrow against their collateral will face tighter constraints, but the protocol reduces tail-risk exposure significantly. The decision underscores how decentralized finance systems respond to external shocks through transparent governance processes, setting precedent for how other protocols may approach similar crises in the future.