Ernesto @eboadom
Co-founder of @bgdlabs, building... Previously core development on the Aave DAO and CTO at @aave (labs) Joined February 2022-
Tweets398
-
Followers4K
-
Following27
-
Likes79
Welcome to _ Barry!
Very excited to announce that I’ve joined the @bgdlabs team!
I will be making a personal donation of 100 ETH to the relief effort coordinated by @aave Labs in relation to the KelpDAO's/LZ exploit. While I'm not involved with Aave anymore, I still believe the Aave protocol is important for DeFi overall. And the coordination effort led by @aave Labs without Aave itself being the exploited system, deserves support
Imo: - Suppliers agree are relatively insensitive to rates at the moment, and they **very** sensitive to specific announcements/plans regarding the unpaired collateral not affecting stablecoins on Aave Core (I really think it is the case, but uncertainty is not good for suppliers). - Stablecoin borrowers are actually quite a priority, because they are the business. Meaning that they are already suffering the high rates, but on the current ~15% levels, for the argument of duration/float, @ImperiumPaper comments, I think it is a scenario they should be prepared to, because it really can happen for 3-5 days, even if rarely sporadically. - The current borrowing rate levels, I'd say, are in quite good "equilibrium" considering the previous. I'd say even quantitatively, the delta LTV-LT of Aave v3 (~2% on more stressed e-modes like Ethena) should have protected a majority of borrowers. Of course, not against the ongoing cost, but still, the cost is not an order of magnitude higher. In the case of borrowers of stables against "volatile" assets, the borrowers assume want frequently) the volatility on the collateral, going long. So the higher borrowing cost on the collateral for a short period of time is not really. - I'm currently an outsider to Aave, but 100% sure @aave Labs are working full-steam to achieve a situation where 100% the stablecoins are not getting affected, and I'd bet neither ETH in any big amount (or zero).
Lots of people are dunking on the Circle proposal to shift Aave rates, and I have, inevitably, been asked my opinion. I’ll share it here publicly. Gordon’s proposal is not incorrect directionally. He correctly diagnoses that the market is not clearing, and provides a pretty
@0xkrishb We actually took AAVE partially during all our engagements, and personally, I have always advocated for SPs to take a percentage of compensation in AAVE
A person I trust commented that sometimes it is important not to ignore weird propaganda, no matter how silly it seems. So, just a thought, which is highly possibly my last on the topic. Maintenance & incremental updates are not (only) what BGD was doing for 4 years in Aave. However, those tasks were very fulfilling work, way more important than people think, and for anybody looking around, a big reason of success in mature products. To be a bit more blunt: the cemetery is full of good initial ideas not well taken care of after. I would argue that indirectly trying to diminish that role precisely now on Aave, is very very far from a good idea.
I am seeing this myth being spread around that the core development team of Aave left. This is indeed false. While Aave labs built V3 up to the 3.0.1 and bgd took over the progressive updates till 3.6, Labs has been independently security reviewing every single V3 iteration that
Principles first. Respect to @omeragoldberg and the @chaoslabs team
Chaos holds a simple principle: we only put our name on work we fully believe in. Principles matter when they cost you something. Today it's costing us $5 million. To the Aave community: thank you for the trust. It was a privilege 👻
Some thoughts in support of the smart contracts' size increase in Ethereum Glamsterdam ethereum-magicians.org/t/increase-max…
My thoughts on it. - I understand the mandate document as: our end goal is the most optimal possible scenario, but we know reaching that requires time and a constantly balancing approach to progress. - Being on the most radical side of decentralisation is relatively easy. Being on the most radical side of optimality and efficiency is also relatively easy. Being on a middle ground (like at least I understand will be the case for a long time in Ethereum), which is constantly dynamic, is the complicated one. - Only by already having a strong position established on the middle ground (Ethereum today) can you double down on principles, while not becoming immobilised. Debates aside, that's the bold approach. - If Ethereum (the chain, the ecosystem) did not act as a credible anchor to principles, there is a high chance that nobody with enough positioning would. And from there, pure efficiency seeking is a slippery slope. - In my opinion, the majority of challenges of achieving perfect CROPS principles in a blockchain are solvable. Far from easy, potentially not doable, but it doesn't feel to me like completely impossible. - I'd really argue that the real value of Ethereum arises almost exclusively from having achieved partially CROP principles. So, double down on that is not even idealistic; it is being practical.
Today, the Foundation’s Board released the EF Mandate. This document, which was first intended for EF members, reaffirms the promise of Ethereum, and the role of EF within this ecosystem.
There are definitely practical improvements, but I really don't think there is anything that makes DAOs impossible from first principles. Regarding huge portions of voting power in centralised entities, directions are: economic incentives (or lack of) for concentration of power (e.g., case of a CEX), self-limitation (e.g., big holder can just self-lock softly), granularity of control (e.g., having mechanisms like @LidoFinance dual gov, multi-stage voting), etc. About security councils, there is nothing inherently wrong with them, and the improvements are limiting their power by "sudo" actions, economic incentives, reputation game theory, etc Another problem that exists outside of your list is the concentration of delegated power, but due to good reasons and performance, which is a very tricky one. Talking about a case like ACI's on Aave, where under the hood, there are hundreds of independent delegators of voting power because they, well, basically like the representation they are getting. And imo, after certain limits, that is not so good, but very unnatural to design protection mechanisms for something being "too good". Of course, it can also degenerate into an exercise of propaganda, hence a problem of uninformed delegators, a lack of expertise. And on DAOs, you need localised initial centralisation in some cases, but that doesn't mean that the party having more influence should not have as its first and main priority reducing dependency on themselves by design. I mean, BGD is a testimony of that approach: we have been contributing to Aave for years, and if it were not for third-party decisions, the ecosystem would be more decentralised than ever. But that is a consequence of poor execution and bad principles on the initial steps of the DAO (basically not having full ownership of itself), not any proof that "DAOs can't work". I would even argue that having a successful DAO on some type of on-chain financial system is way simpler than, for example, on base layers like Ethereum. In pure computation environments like Ethereum, it is trickier to just define "what is good" direction-wise.
DAOs are a method of both direct and indirect transparency and accountability when done right. Whoever doesn't aim to have an on-chain application controlled partially or totally by one or multiple DAOs, has very certainly nothing to do in the blockchain world long term. People will study the Aave DAO, but this is just the beginning.
@SagivMooly @andy_koz @bgdlabs @Certora Appreciate the kind words, but no goodbye here @SagivMooly 😁 Neither Certora nor BGD is going to disappear any time soon
@laurashin Not really any drama in what concerns BGD. We are simply not interested in contributing going forward to the current Aave, but from a very rational point of view
Needless to say, the Aave protocol is perfectly fine and will continue to be so. BGD is still working on Aave, until our current engagement with the DAO finishes at the beginning of April. Highly recommended to read our full forum post on what happens going forward (and what doesn't) governance.aave.com/t/bgd-leaving-…
After 4 very productive years, we will be stopping our contribution to the Aave ecosystem as service providers, once our current scope finishes
BGD will be leaving Aave governance.aave.com/t/bgd-leaving-…
ACI currently compensated ~$3m/year by the Aave DAO (and that being by far the highest in last 3y) is, I think, interesting food for thought
For me, Aave at $10 million versus now $70 billion feels pretty similar in terms of how critically important it is. Are you curious about Aave’s approach to security and their take on AI's Impact on Security? Check out my notes on the Web3 Security podcast episode featuring Ernesto Boado (@eboadom) of @bgdlabs and ex-CTO of @Aave, hosted by @jack__sanford from @sherlockdefi. From Geographic Systems to DeFi's Biggest Protocol Ernesto isn't the typical "obsessed with programming from age 5" genius coder. He's a multi-disciplinary software engineer who studied computer science in Spain but wasn't deeply into coding from an early age. What really changed everything for him was Ethereum's initial ethos in 2018: this global server that anyone can access, involved with financial transactions. That's what hooked him. Before ETH Lend (which later became Aave), Ernesto was working in geographical systems (maps and GIS software). He was experimenting with early Ethereum on his own (Remix, Truffle, MetaMask era), building a governance application. In December 2017 (top of the bull market!), he reached out to @StaniKulechov, the founder of ETH Lend, which had just completed its ICO. Stani saw potential, and Ernesto joined a small team of about 15 people. Managing $70 Billion: Abstract the Numbers Aave currently has roughly $70 billion in TVL, making it the number one protocol in the world by TVL. If Aave were a US bank, it would be one of the 40 largest banks in the entire United States. Ernesto's most fascinating take: "For me, when Aave was $10 million versus now $70 billion, it's pretty similar in terms of my perception of criticality." He explains that it's mandatory for developers on systems like Aave to be very abstract. You need to understand what's at stake, but you can't get obsessed. If you get obsessed, you'll immobilize yourself and not do anything because you're terrified of breaking something. The key is having good procedures. If you have good procedures, you shouldn't break anything. And you need protections so that if any problem happens, you can react. Ernesto believes this abstraction is very positive. Understanding criticality without obsessing over the numbers allows the team to keep shipping. Upgrade Philosophy: V3.x vs. Uniswap's Approach One of the most interesting topics was comparing Aave's upgrade strategy to Uniswap's. Uniswap goes V2 → V3 → V4 with completely new deployments and user migration required. Aave goes V3.0 → V3.1 → V3.2 → V3.3 → V3.4 → V3.5, upgrading the existing system. Ernesto thinks comparing these systems is misleading. The underlying systems are completely different. For Uniswap V4, it makes sense to be fully immutable because it's a very simple system. When you want to change it, the change is so radical that it probably makes more sense for users to migrate to another smart contract, and you just focus on the tooling for that migration. For Aave, the more mature it gets, the less sense migration makes. From V1 to V2 or V2 to V3, the changes were relatively radical and complicated to apply safely. But now on V3, that line starts to blur. Certain architectural changes aren't so simple to apply on V3, but they're doable. Whether it's worth it is debatable. “If you have a system with $70 billion, you should probably just maintain it for as much as possible and try to improve it if it's not some completely out-of-hand project.” He highlights that V3.0 at the beginning compared to V3.5 running now involved very radical changes: accounting (static vs. dynamic), precision math completely revamped, grouping of assets in the pool, features deprecated, features added, and countless other changes. It's good that people still perceive V3 as V3, but there were five upgrades over three years. Not super fast-paced, not super slow-paced either. V4 Is Coming: How Will Aave Manage Both? Aave V4 is in the audit process, which creates an interesting situation. V3 has $70 billion in TVL, and V4 will start from zero. So how will Aave manage supporting both? Ernesto notes that Aave already has experience with this. Aave V2 is still active with about $400-500 million across three networks, even with active deprecation steps (adjusting rates to incentivize migration to V3). V4 has a slightly different target. From communications, V4 seems quite oriented to builders or a more modularized approach, even targeting people who want to run their own mini pools. V3, on the other hand, is very monolithic on purpose, controlled by a sole entity (the DAO, which is multiple entities behind the scenes) and opinionated on almost everything. Ernesto thinks this was one of the recipes for V3's success. When you try to do too much modularity, it becomes tricky for users, confusing, and UX doesn't catch up in time. The advantage: V3 is perfectly fine, and V4 will exist. If people migrate to V4 or stay on V3, the benefit is for the same DAO behind the scenes. Maintenance is a concern for sure, but Ernesto believes V4's different focus means both can coexist. Decentralization: Being Honest Is Key When asked about advice for other teams navigating decentralization, Ernesto highlighted that it's a very gray area: is centralization good, or is decentralization good, and how do you do one versus the other? One of the main issues is that until very recently, there weren't clear guidelines. This is especially challenging for small teams in a completely open environment where anyone can write and deploy smart contracts. How do you structure a company? What's the plan for progressive decentralization? Does it make sense from a business standpoint or common good perspective? There are so many variables. For Aave, decisions were pretty natural: - People trust non-anonymous people to run a protocol more than anonymous people - Once the AAVE token was pretty well distributed, it was clear the DAO should give back governance control Ernesto emphasizes that onchain governance via token, if the token is well distributed, is just very good security-wise. You need certain protections, but it's arguably stronger than alternatives like multisigs. How to Become a Trusted Independent Researcher When asked how an independent researcher can become one of Aave's go-to trusted researchers, Ernesto's answer was simple: It boils down to work. The researchers BGD works with (both firms and solos) spend a lot of time on Aave's codebase. They submit reports, invalid reports, minor valid reports, sometimes major ones. It's just a lot of work behind the scenes. That creates trust. Being honest and not trying to do weird shenanigans is key. Ernesto understands why the industry is sometimes polarized and adversarial between bounty hunters and projects (there's a lot of history of projects not being fair), but for Aave, there's nothing to win from being unfair with researchers. It's just stupid. What they don't accept is speculation. They know what speculation looks like because they have enough knowledge of Aave to distinguish it. The pattern Ernesto sees with majorly successful researchers and bounty hunters: It's usually very easy to work with them. There's no drama. These are people who've earned millions of dollars in bounties and contracts, and they're rational. They accept when something is a fair evaluation, whether it's low, medium, or high severity. His advice to researchers: 1. Be honest, especially with top protocols that have no incentive to be unfair 2. Spend a lot of time on the code 3. Participate in discussions (even if Aave has some apathy in participation, researchers should engage) 4. Proactively add value: Many of BGD's relationships with solo researchers started with someone reaching out with something that maybe wasn't valid, but the effort and understanding showed a good approach, and they were put in the front line to work with BGD AI's Impact on Security Ernesto sees symptoms of AI having an impact. In recent months, more and more security researchers are clearly using some type of hybrid approach. He doesn't think AI is at the level of finding deep bugs involving lots of components, but in both DeFi and traditional software, bugs and their costs have historically been the same: buffer overflows, pointer issues, injections, these have been happening for 70 years. AI could serve as a filtering tool, hinting tool, or reminder. Another very important aspect Ernesto sees in successful researchers: They're organized people, quite systematic. Yes, they have strong intuition, but they don't just act on intuition. They keep it in mind, use pattern recognition, and probably document their own internal checklists. That's the secret sauce, you need some type of assistant, which historically has been your own notes and your past self. AI could be that assistant: "Did you check this? By the way, you trained me with some patterns, so did you think in this direction?" That's where Ernesto sees potential value. Documentation Is Non-Negotiable One of Ernesto's core principles: Documentation should always be oriented to auditors, and specifically to auditors they didn't work with before. In a system like Aave, if you cannot explain to a security auditor in the DeFi industry (even if not familiar with Aave) what the upgrade is about, all the edge cases, points of focus, etc., then the upgrade is not ready. There's no other way to see it. This is BGD's internal policy: Documentation should be very good, always. If you don't do it well, it means you don't understand the system.
Some (final) thoughts on $AAVE ownership principles and transparency about them governance.aave.com/t/arfc-aave-to…
@EvgenyGaevoy I didn't have time to even apply feedback on the Ownership phase 😅 But yes, I will elaborate on different points on the forum
@antonttc I already commented on what I think of the creation of this proposal, but it really has no type of effect on Aave v3. Still the biggest and most solid DeFi protocol now and in the foreseable future
Marc Zeller @Marczeller
108K Followers 3K Following
Emilio^ @The3D_
19K Followers 691 Following Senior VP of Engineering at @aave space nerd - my astrobin profile https://t.co/pJxenyMvcV Opinions strictly my own
Julien B. @bneiluj
89K Followers 8K Following electrical engineer. CEO Stake Capital Group (@StakeCapital). founder of StakeDAO (+$200m assets), board advisor to a few unicorns @lucis_life @morpho @zama & +
tokenbrice.eth (🐜,... @TokenBrice
26K Followers 922 Following Mad Stablecoin Scientist Founder mode @polarisfinance_, @PharosWatch and @deficollective_
Tarun Chitra @tarunchitra
81K Followers 7K Following ヽ(⌐■_■)ノ♪♬ @gauntlet_xyz/@robotventures/@aerafinance/@thelatestindefi/@_choppingblock/@zeroknowledgefm // main: @guilleangeris
Zach Rynes | CLG @ChainLinkGod
190K Followers 4K Following Strategic Initiatives @Chainlink | Digital commodity enjoyer | Opinions are my own
Barry Fried 🇮🇱 @BarryFried1
50K Followers 1K Following @bgdlabs | Not related to SBF | white monster gang
Brother Odin 🥷🏽 @odin_free
38K Followers 2K Following Head Product Growth @StarkwareLTD views are my own (real), nfa, fafo, dyor, bags in all i talk.
pascal0x 🧪🦇🔊 @pscltllrd
9K Followers 677 Following Playing with synthetic flavors at @Jarvis_Network.
CryptoCondom @crypto_condom
155K Followers 2K Following
monetsupply.eth @MonetSupply
33K Followers 3K Following head of strategy @sparkdotfi, angel investor, prev @blockanalitica
laurence @functi0nZer0
66K Followers 5K Following shoggoth interceptor @wildcatfi // if the rules we followed brought us to this, of what use were the rules?
Vance Spencer @pythianism
158K Followers 9K Following Co-founder @hiframework. Tweets not financial advice. Views my own. May have assets in positions discussed.
Patrick Collins @PatrickAlphaC
114K Followers 5K Following Co-founder of 🛡️@cyfrin | 🟪 @soloditofficial | 🦅 @codehawks | 🎓 @cyfrinupdraft | ⚔️ @battlechain
Ignas | DeFi @DefiIgnas
161K Followers 2K Following Subscribe to my DeFi blog to get ahead of the curve 👉 https://t.co/7O0WAdXUnT Co-founder of @PinkBrains_io DeFi Creator Studio
Bryant Sinka @BryantSinka
60 Followers 208 Following Documenting my life's adventures and sharing the experiences they provide through photography, videography and writing
Zeek @zeektozemoon
69 Followers 426 Following
GioLuca @UbuQuichotte
509 Followers 370 Following French Artist https://t.co/vnF6rvHaqr https://t.co/jdKdAmxQ4v…
E. Hillford @Surfingcrypto
488 Followers 2K Following Yes to freedom! Yes to crypto! Yes to cash! No to CBDCs Ethically open minded | No bias Reminder: Ethereum Virtual Machine (EVM) is the Web3 foundation
Swis @IAM_SWIS
252 Followers 1K Following Aspiring autodidact.. 🤙🏾 | Former Cyber Nerd | Full Time Trader & Investor | Hooper 🏀 | Still Tryna Catch em All | Est. 2016 crypto
NFTboi 🥷 @nftboi_
111K Followers 8K Following Former Private Equity turned full-time degen | Growth @umia_finance | Strategy @archntwrk
Sushi @Sushi70074126
65 Followers 248 Following
Michael @michaelycrypto
2K Followers 953 Following I'm doing onchain things and researching Bitcoin, MegaETH, Zama, Alkanes
Lada Volvach 🇺🇦 @lada_volvach
535 Followers 862 Following talent solver at @0xproject & @matchaxyz | defi, mev. **views are my own**
SonerArslanXQ @sonerarslanXQ
573 Followers 120 Following ₿ Gerçekçiyim, maximalist değil. BTC ağırlık | ETH | Early stage gems Conviction inşa et, cycle geç, HODL. #BTC #ETH
Surbhi Audichya @audichyasurbhi
94 Followers 952 Following Senior software engineer @creditcoop_xyz. @RareSkills_io fellow, Previously building at @HifiFinance, @solidefi_invest, @BitHyve_ | Isha meditator
Guard @PoorGuard
4K Followers 2K Following Lawyer dog who likes to talk strategy on the internet Adviser @extendedapp I write about conflict & strategy etc at https://t.co/LIvjovdjUO
sacha.eth | .stark | ... @sach0x
237 Followers 1K Following Crypto since 2017, DeFi since 2019 ⚽ Sorare manager : Sachaldo ✨ Starknet is the path
Escapeit @Escapeit101
26 Followers 518 Following
Inverse ME @LionsDen_2022
451 Followers 3K Following Crypto enthusiast | 8+ yrs in blockchain | Sharing TA tips (Sentiment, Fibs, on-chain data) & simple price ideas | Self-taught via trial & error. $BTC ...
Pete @XbXXaaX
0 Followers 22 Following
Ayn Rand @AynOfWallStreet
27 Followers 144 Following Half philosopher, half trader. Fully capitalist. Feelings don’t pay dividends.
shanenullain.eth @shanenullain
51 Followers 460 Following fintech lead software engineer | crypto since 2014
Dee Fai @done_tomorrow
64 Followers 920 Following #DeFi Enthusiast | On-chain analytics | Lurking in the blockchain shadows
Henkell Trocken @Henkell_trocken
44 Followers 492 Following
Over the Reality 🌐 @OVRtheReality
92K Followers 7K Following The world's largest 3D map. Earn $OVR by mapping real-world locations to fuel Robotics, Vision AI, and XR Become a mapper: https://t.co/4XlxLAfAk7
MC 2.0 🦁🇮🇱�... @MC25013988
198 Followers 967 Following 🇺🇦🇨🇿🇪🇺#Chainlink Autist is my middle name. #Chainlink is a bridge between real world and blockchain ecosystems.#4IR#RWA #SWD
Andrey Popov priv/acc @drdpov
32 Followers 250 Following Software developer · Java · Learning and Sharing · 💻🍁
kimmo @KimmoOrb
808 Followers 669 Following building new internet with @LC and @orb_club and @masknetwork
Marc Zeller @Marczeller
108K Followers 3K Following
Emilio^ @The3D_
19K Followers 691 Following Senior VP of Engineering at @aave space nerd - my astrobin profile https://t.co/pJxenyMvcV Opinions strictly my own
Julien B. @bneiluj
89K Followers 8K Following electrical engineer. CEO Stake Capital Group (@StakeCapital). founder of StakeDAO (+$200m assets), board advisor to a few unicorns @lucis_life @morpho @zama & +
0xngmi @0xngmi
193K Followers 326 Following Building a transparent defi dashboard at @defillama. Would rather be right than make money
Aave @aave
698K Followers 63 Following The most trusted financial network. Earn, borrow, save, and swap.
This Week in Aave @aaveweekly
179 Followers 30 Following https://t.co/tXDiiQwbZH A weekly roundup of important activity in Aave DAO by @LlamaRisk
MatthΞw (HIRING 👀... @Matthew_Graham_
4K Followers 5K Following
Zer0dot @Zer0dots
4K Followers 1K Following Time to write code and change lives. Protocol @Polymarket Prev @Alchemy @bgdlabs @aave
☠️ dΞth @dethcrypto
2K Followers 218 Following / dev / Ethereum dev tools. Creators of 🔌 TypeChain, ⚒️ eth-sdk, and ☕ earljs. https://t.co/wK6Lui9bfa
Dimasya @satanworker
563 Followers 2K Following Previously @aave and @bgdlabs @safe_space_app - encrypted iOS media folder Currently @ValantisLabs opinions are my own
definikola @definikola
4K Followers 1K Following risk @BlockAnalitica (@SkyEcosystem), prev @defisaver
Andrey Ko @andy_koz
196 Followers 10 Following Fullstack DeFi developer. Aave ecosystem lover ❤️ @bgdlabs co-founder
Luigi D'Onorio DeMeo @luigidemeo
69K Followers 6K Following CSBO @aave, former CSO/COO @avax, Former @Citi / Most tweets autodelete
James.eth 🔥_🔥 @blockchainjames
12K Followers 3K Following DAOs will eat the world and tokens are value magic 🔥_🔥
Greg Vardy @0xGreg_
6K Followers 1K Following founder, Pineridge Capital // prev helped build Ethereum {CTO @Nethermind}
sakulstra @sakulstra
851 Followers 483 Following Posting stuff about defi/node/react - bad takes are my own. Tweets are my own.
Mark Hinschberger @mark_is_here
1K Followers 984 Following On sabbatical from @aave Chief Agentic Officer ⬇️ https://t.co/5lNFEdea4k https://t.co/4RlNAZx8GP https://t.co/YQRojnf1Q6 https://t.co/1tSPRHKaWj









































