Aave

In November 2017, Stani Kulechov’s ETHLend sold LEND to fund a peer-to-peer lending system. Aave Labs later described the sale as raising $16.2 million; because that number is a project retrospective, it should be read as the company’s account rather than an audited fundraising finding.

The early design asked lenders and borrowers to find matching terms. During the 2018–2019 bear market, the team took the Finnish word Aave—ghost—and replaced bilateral orders with shared liquidity. January 2020’s V1 made the decisive move: suppliers received aTokens, borrowers drew from pools, and flash loans used transaction atomicity instead of conventional collateral.

That lineage matters because “Aave” does not identify one immortal contract. V2 arrived in December 2020; V3 began on six networks in March 2022 and later reached Ethereum; V4 opened on Ethereum in March 2026. Older deployments could be frozen or remain available separately, as V1’s 2022 freeze shows.

Aavenomics compressed 1.3 billion LEND into a 16 million AAVE design. The conversion rate was 100 LEND for 1 AAVE: 13 million were reserved for migrating holders and 3 million were created for a governance-controlled Ecosystem Reserve.

AIP-1 began the migration in 2020 and paid initial Safety Module incentives, explicitly without slashing. AIP-7 activated legacy slashing in January 2021. The token therefore acquired two distinct jobs—governance power and optional exposure as protocol backstop—rather than ownership of the lending pools.

The migration did not remain open forever. On 9 May 2026, proposal 480 disabled the migrator and returned about 302,000 unclaimed AAVE to the Ecosystem Reserve. The rescue implementation now makes migrateFromLEND revert. A historical 100:1 promise is no longer a current redemption route.

Treasury control is also not treasury ownership. Governance can allocate Ecosystem Reserve and Collector assets through proposals, but an AAVE balance does not provide a pro-rata withdrawal, dividend or legal claim on those assets.

Governance V3 finished its operational migration on 25 December 2023. Its core lives on Ethereum, while voting machines and payload controllers can sit on other networks. Storage proofs carry snapshotted Ethereum voting power; a.DI carries messages; executors finally call contracts after the appropriate delay.

This design separates an open trigger from privileged execution. Anyone may register a payload and, after approval and timelock, call executePayload. But only a queued governance message reaches an Executor that actually holds protocol permissions. Owners can update portals, strategies or executors through governance-controlled roles, and several contracts remain upgradeable.

Two emergency groups sit beside the token vote. The 5-of-9 Governance Guardian can cancel proposals or unexecuted payloads. The 4-of-7 Protocol Guardian holds EMERGENCY_ADMIN powers for pausing pools and freezing reserves. The current permission inventory also records cross-chain adapters, automation and bounded service-provider roles.

AAVE, stkAAVE and aAAVE may supply or delegate voting power, but concentration, thresholds and participation determine outcomes. “Token-governed” is accurate only when paired with this machinery; “every action is decided directly by all holders” is not.

The original Safety Module made stkAAVE and related assets a broad last-resort pool. It remains visible: current help lists legacy AAVE and ABPT, with up to 20% slashing after an onchain governance vote, and legacy GHO with slashing currently set to 0%. Those settings can change.

Umbrella, active since 5 June 2025, narrows the match between risk and capital. Aave aTokens or GHO can be staked for a particular reserve and network. Automated slashing lowers the stake token’s asset backing; contract documentation then describes a separate, permissioned coverage step through the Collector. It is more precise than calling the pool an automatic insurance payout.

V4’s Hub-and-Spoke launch adds another layer of configurable risk: shared hubs hold liquidity while spokes define borrowing and liquidation rules. Aave Labs’ launch is evidence that the contracts and interface went live, while its market-share and faultless-resilience claims remain promotional assertions unless independently measured.

Pooling capital let Aave leave behind the search for an individual lender. Each generation then had to specify who could change the conditions, what could be stopped, and which funds would meet a shortfall. Following the roles of users, voters, delegates, developers, service providers, executors and Guardians is how a reader can assess each new claim of safety or decentralization.