.
@Aave has a useful example of how risk controls can drift without a code change.
CAPO limits how fast a collateral exchange rate can rise. LlamaRisk found stale snapshots had left some caps well above current ratios, creating more room for inflated collateral valuations.
Their proposal refreshes those reference points. It is proposed maintenance, not a reported exploit.
Once a control depends on elapsed time, its refresh schedule is part of the security design.
Hat tip to
@LlamaRisk for the analysis.