Certora - Monthly Update

Governance
14

August 2025

Executive Summary

Governance Proposal Reviews

:eyes: Total proposals reviewed: 14

:white_check_mark: Proposals approved: 14

:writing_hand: Proposals rejected/modified: 0

:cross_mark: Issues requiring proposal cancellation: 0

:hammer_and_pick: Proposals required actions other than cancellation: 1

Code Reviews Completed

:detective: Projects reviewed: 4

  1. Umbrella V1.0.1 - The review is finished. The report will be released soon, along with the code.

    • An upgraded version of the Aave Safety Module, built on a staking and slashing mechanism. They collectively provide a framework for monitoring reserves, assessing shortfalls, and executing slashing operations to cover deficits, enabling coordinated and efficient deficit management across the Aave ecosystem, while allowing participants to earn rewards for serving as collateral for reserve deficit coverage.

  2. RewardsSteward - The review is finished. The report will be released soon, along with the code.

    • RewardsSteward is a minimal Aave steward focused on incentives operations. It lets anyone trigger reward claims on behalf of the DAO’s Collector, and sweep incidental assets from the steward to the Collector, while guaranteeing all value flows only to the Collector. It holds no governance power and no custodial state; it simply integrates with RewardsController once set as the authorized claimer. This design enables fast, low-friction rewards ops without requiring new votes for routine actions.

  3. Clinic Steward V2 - The review is finished. The report will be released soon, along with the code.

    • The Clinic Steward is a permissioned helper that allows the Aave DAO to repay or liquidate bad debt using funds from the Collector under a capped USD-denominated budget. This PR refactors the steward into a common base with two variants: ClinicStewardV3, which remains aligned with the current live deployment, and ClinicStewardV2, which adapts the logic for Aave V2 by integrating the appropriate reserve getters and oracle path (asset→ETH→USD). The refactor preserves V3 parity while extending the same controlled, budgeted bad debt cleanup functionality to V2 environments.

  4. Re-configuration of Core’s GhoDirectMinter - The review is finished. Link to the forum post with our review

    • This proposal outlines the re-configuration/migration of the current CoreGhoDirectMinter to a new instance. This is necessary because upon its activation, the existing facilitator was misconfigured with a redundant layer of ProxyAdmin, which prevents future upgrades.