What six years without an exploit buys
Aave has carried the largest lending book in DeFi since 2020, through every liquidation cascade, without an exploit of its own contracts. Its risk governance publishes the reasoning behind parameter changes and moves before problems arrive rather than after. When people say DeFi has blue chips, this is the protocol they mean.
April 2026 exposed the shape of the risk
The contracts performed exactly as specified. What they had been told to accept included rsETH, and when that token was minted out of nothing in the Kelp bridge exploit, borrowers took real assets against fake collateral and left Aave carrying between $177m and $236m in bad debt. TVL fell about $6.6bn in the days after. A shared pool means one listing decision reaches every depositor, and this is what that sentence costs.
Revenue that does not depend on incentives
Interest paid by borrowers is consistently positive net of emissions, with both figures visible on-chain. Very few protocols in this sector can say that across a full cycle.
Governance
Token votes executed through a timelock can change risk parameters affecting existing positions, and vote distribution is public. That is real power over your position, exercised slowly and in the open.