Risk analytics firm Chaos Labs is terminating its engagement with Aave, DeFi’s largest lending protocol, after a dispute over the scope and economics of the upcoming Aave V4 upgrade. The move raises questions about risk oversight for the protocol’s $12 billion in total value locked (TVL).

“The engagement no longer reflects how we believe risk should be managed,” Omer Goldberg, CEO of Chaos Labs, said in a post on X, pointing to a “fundamental misalignment” with Aave’s evolving strategy. Chaos Labs has managed risk for Aave since 2022.

The core of the disagreement stems from Aave’s V4, a major technical overhaul that introduces a new modular architecture. Chaos Labs argued this dramatically increases operational complexity and responsibility without a corresponding increase in resources. The firm stated that even with a proposed $5 million budget, it would be operating its Aave services at a loss, noting the figure represents about 2 percent of Aave's $142 million in 2025 revenue—well below the 6 to 10 percent banks typically spend on risk infrastructure.

This departure creates significant operational uncertainty for Aave at a critical moment. Any gap in risk oversight for a capital pool of this size could have cascading effects, potentially leading to mispriced liquidation thresholds or delayed responses to market volatility. The exit follows the departure of other key contributors, including ACI and BGD Labs, pointing to broader governance strains within the Aave ecosystem.

Aave Pledges Continuity, But Governance Questions Loom

In a response, Aave founder Stani Kulechov said the protocol would continue operating without disruption. He emphasized that Chaos Labs was one of two risk providers and that Aave will work with the remaining firm, LlamaRisk, and internal teams to ensure “uninterrupted risk coverage.”

The split, however, highlights a structural tension in decentralized finance. As protocols like Aave become more complex, the informal, grant-based relationships with specialized service providers are breaking down. A similar dynamic played out when risk firm Gauntlet ended its partnership with the lending protocol Compound in 2023 over compensation disputes. For Aave’s token-holder-run DAO, the immediate challenge will be to fast-track a proposal to onboard a new partner or formally expand LlamaRisk’s mandate, a process that can be slowed by community debate over costs.

This article is for informational purposes only and does not constitute investment advice.