Aave Labs has announced the security framework for Aave V4, proposing a "security-first" development model that embeds security verification into the architecture design phase, rather than just a final audit before deployment. This security program lasted approximately one year, accumulating about 345 days of security reviews, funded by a $1.5 million security budget approved by the Aave DAO. The V4 security process reportedly combines formal verification, manual auditing, invariant testing, fuzzing, and public security competitions, employing a multi-layered auditing approach. Future protocol development will continue to utilize five long-term security measures, including introducing formal verification early in development, implementing multi-layered security auditing methods, continuous verification mechanisms, a long-term bug bounty program, and leveraging AI to assist in smart contract security scanning. (The Block)