On May 28, Aave Labs announced that its UK subsidiaries Push Labs Ltd. and Push Virtual Assets Ltd.
Aave has announced a major overhaul of its risk management framework following the $230 million rsETH exploit in April 2026, one of the largest decentralized finance (DeFi) attacks of the year. According to the lending protocols newly released postmortem, the incident did not result from a vulnerability in Aaves smart contracts.
An official postmortem traced the exploit to a LayerZero bridge verification failure and outlined a sweeping overhaul of Aave's asset-listing standards as DeFi risks shift beyond smart contract bugs.
A single forged cross-chain message exposed 116,500 rsETH and triggered an industry-wide DeFi recovery effort.
Galaxy data puts Aave V3 e‑mode near 90% LTV and a 1.05 health factor, while rsETH exploit fallout spurs listing overhauls and USDe supply‑cap increases.
Aave Labs won FCA approval for two UK subsidiaries, clearing a key hurdle for expansion and giving the DeFi firm a compliant base in Britain.
Aave Labs has obtained FCA cryptoasset registration in the U.K. for its Push subsidiaries, unlocking zero-fee fiat on-ramps.
The framework standardizes technical requirements for asset listings, expansions, and monitoring across Aave deployments.
Aave asset listing framework standardizes technical review rules for Aave V3, V4 and Horizon assets
Regulatory Approval: Aave's Push subsidiaries secured FCA cryptoasset registration, enabling regulated stablecoin ramping development in the UK. UK Framework Shift: Aave advances early compliance as the UK prepares for stricter FSMA-based crypto rules by 2027. European Expansion: Push grows its zero-fee, non-custodial euro-to-stablecoin service across the EEA amid rising competition.
Over 50% of DeFi hacks were due to compromised admin and overall operational security issues.
Aave Labs' FCA registration enhances its regulatory credibility, potentially attracting institutional partnerships and expanding DeFi integration. Aave Labs secures FCA registration for Push subsidiaries in UK.