51 Insights

51 Insights

CEO Notes

The $196M hole Aave didn't code

Marc Baumann's avatar
Sangam Bharti's avatar
Marc Baumann and Sangam Bharti
Apr 24, 2026
∙ Paid

Hey, it’s Marc,

We’ve watched a lot of DeFi blowups. This one’s different. Nobody hacked Aave last weekend. $196M walked out the door anyway. The attacker forged a message on a bridge next door, minted $292M of fake rsETH, and posted it to Aave as collateral. Aave’s code worked exactly as written. That’s the problem. [ANNOUNCEMENT]

Let’s unpack.

The Sig…

User's avatar

Continue reading this post for free, courtesy of Marc Baumann.

Or purchase a paid subscription.
© 2026 Marc Baumann · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture