The memo
REJECTED ON GOVERNANCE AMBIGUITY AND A DEMONSTRATED SYSTEM-WIDE VULNERABILITY, NOT ON HORIZON-SPECIFIC BAD DEBT. Horizon is a permissioned instance of the audited Aave V3.3 codebase letting institutions borrow stablecoins (USDC, RLUSD, GHO) against allowlisted tokenized RWA collateral (Superstate USTB and USCC, Centrifuge JTRSY and JAAA, Circle USYC, VanEck VBILL, and others). No Horizon-specific bad debt or exploit was found, and risk parameters are managed by LlamaRisk with Chainlink NAVLink pricing — real institutional infrastructure. But Aave's own public statements are in direct tension on who actually controls it: Aave's blog states "Aave Labs does not control or operate any version of the Aave Protocol," while the governance forum describes Aave Labs holding an "Executive role" over Horizon's risk parameters, oracle configuration, and asset listings — an unresolved accountability question a delegate has separately disputed in a funding-vote controversy. Horizon shares its codebase, oracle infrastructure, and DAO governance with Aave's core markets, which suffered a roughly $177-200M bad-debt event in April 2026 after a LayerZero-bridge exploit let attackers mint unbacked rsETH used as collateral — a vulnerability class this registry has already used to reject LayerZero V2 itself. Horizon TVL has also declined 28% month-over-month as of a July 2026 snapshot. Together, these are standing facts, not a temporary gap in a otherwise-clean file.
What would reopen the file
- Aave Labs' authority over Horizon is stated consistently across Aave's own public materials, resolving the "does not control the Protocol" versus "Executive role" tension
- Horizon demonstrates no correlated exposure through a subsequent Aave-ecosystem-wide exploit or bad-debt event
- TVL and active-loan volume recover and stabilize, ending the multi-month decline documented through July 2026
- A primary Certora (or equivalent) audit report specific to the Horizon deployment is published and reviewed
Facts on file
- Verdict
- Rejected
- Exposure
- other
- Chains examined
- Ethereum
- Memo version
- v1
- Reviewed
- Next review