Aave's governance has approved a significant upgrade to its treasury management infrastructure, consolidating signer roles across seven budget-holding multisigs while implementing a more robust nested security model. The change, proposed by TokenLogic and implemented in June 2026, reflects both operational necessity and evolving best practices in decentralized finance custody. As the protocol's service provider ecosystem has contracted, the DAO seized the opportunity to strengthen its financial controls rather than simply refreshing rosters in isolation.
The core innovation lies in replacing flat signer architectures with nested multisignature accounts. Previously, budget-holding SAFEs relied on direct individual signers—a structure that works at small scale but creates friction during organizational transitions and concentrates custody risk. Under the new model, each of the three signers controlling a budget SAFE is itself a 2-of-3 multisig owned by an independent organization. This nested approach means that compromising any single entity's signing keys no longer grants direct treasury access. Instead, attackers would need to simultaneously breach keys across multiple organizations, fundamentally raising the barrier to fund theft. The architecture mirrors institutional custody best practices seen in traditional finance, where banks rarely maintain operational accounts signed by individual employees alone.
The proposal maintains Aave's established two-layer treasury structure while hardening its security posture. Layer 1, the budget anchors, now each operate under 2-of-3 nested governance requiring organizational-level consensus before any transaction executes. Layer 2, the operational SAFEs (where routine transactions flow), remain separate and subordinate, limiting exposure if day-to-day signing keys are compromised. By bundling this architectural upgrade with the periodic signer refresh, Aave avoided the coordination overhead of two separate governance cycles while ensuring all roles consolidate into an already-approved security framework. The proposal deliberately omits individual signer identities, emphasizing that the security model itself matters more than who occupies any particular role.
This update demonstrates how mature protocols can incrementally strengthen governance infrastructure without paralyzing operations. As Aave continues managing billions in user deposits, the nested SAFE model provides both operational flexibility and defensibility against evolving attack vectors, setting a precedent other DAOs may adopt as treasury complexity increases.