Post-exploit response score
Aave v3's assessment for RD-F-081 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
rsETH/Kelp response: Guardian freeze within ~75 minutes (strong). Post-mortem within 2 days (excellent). Named root cause, specific tx hashes referenced. DeFi United recovery effort shows transparency and initiative. Deduction: the 1/1 DVN risk had been publicly flagged on the Aave governance forum 15 months before exploit without Aave acting to delist or restrict rsETH collateral. Score: 3/5. Yellow.
Sources #
- GovernancersETH Incident Report — Aave Governance ForumrsETH Incident Report (April 20, 2026)retrieved 2026-04-27
- Kelp DAO Hack Report (internal hacksdatabase)hacksdatabase/hacks/kelp-dao-rekt.mdretrieved 2026-04-27
Methodology #
Curator-score (1–5) the most recent incident response on: compensation completeness, transparency of disclosure, root-cause analysis depth, and operational recovery speed.
See the full factor methodology and distribution across all protocols →