Aave Risk Manager Plans Time-Based Borrowing Limits After $44.6 Million Ether Loan

Aave’s response to a rapid, large-scale loan is shifting toward automated controls. LlamaRisk CEO Adam Sadowski said the protocol’s risk manager is developing a system to limit how much users can borrow over set periods. The proposal follows a Binance-linked wallet’s use of $60 million in USDT collateral to borrow 19,762 WETH, then worth about $44.6 million, in roughly three minutes.

Sadowski described the planned system as a risk oracle: software that turns external signals into actions on a DeFi protocol. He offered no details on the proposed borrowing ceilings, time windows or launch date. His comments came in an Uneasy Money episode recorded Nov. 4, six days after the borrowing. LlamaRisk associates the wallet with the exploiter, and Etherscan labels it a Binance hot-wallet exploiter.

The loan’s current position

By 16:04 UTC on Nov. 5, the wallet’s Aave V3 Ethereum Core position owed about 9,885 WETH against roughly 35.57 million USDT in collateral. Its health factor was about 1.24, according to onchain data. A health factor below 1 triggers liquidation; based on Aave’s oracle pricing, ether would need to rise about 24% for this position to become liquidatable again.

The position had already been partly liquidated. At 14:49 UTC on Nov. 4, a liquidator repaid around 9,884 WETH and received about 24.38 million USDT. Sadowski said the loan had “started to enter liquidation.” LlamaRisk’s forum account says the original borrowing happened across about three minutes on Oct. 29.

Aave’s guardians froze markets roughly 40 minutes after the borrowing. The freeze blocked new deposits and loans, while users could still repay debt or withdraw collateral. Ethereum Core has since reopened, but USDT and USDC deposits there currently provide no additional borrowing power because their loan-to-value ratio is zero.

Automating risk controls

Aave’s guardians are a seven-member multisig that needs four signers to act, Sadowski said. Risk stewardship is shared by LlamaRisk and Aave Labs. He argued that manual approval can be too slow when “AI agents” are scanning for exploits and acting on them.

One possible foundation is Chainlink’s Runtime Environment (CRE), which lets risk managers run custom logic. LlamaRisk already uses CRE for its Aave oracle covering Pendle principal tokens. A governance proposal for that system says the infrastructure could also support other oracles, including one for supply and borrowing caps.

LlamaRisk’s forum posts about the Binance-linked loan didn’t describe a time-based borrowing limit, though users called for flow controls. Forum user gnarvaja pointed to an April proposal for an automated updater that would restrict short-term increases in Aave V3 supply caps.

Limits bring trade-offs

Kain Warwick, Synthetix founder and co-host of the show, questioned whether per-account limits would work: borrowers could spread activity across multiple wallets. Sadowski acknowledged that “there’s always a trade-off” in risk management. Warwick also warned that “the unintended consequences of changing these systems is extremely high.”

Sadowski said the Aave DAO determines how often a delegated operator may act and which parameters it can change. Those guardrails will shape how quickly automated controls can respond, and how much authority they receive. The immediate proposal remains at an early stage: LlamaRisk has announced the work, but hasn’t yet specified its operating limits or timing.

Related Listen: Uneasy Money: What the $6B Binance Hack Revealed About Who Can Freeze Stolen Funds