Aave Arc Review 2026: Permissioned, KYC-Gated Lending on Ethereum

Aave Arc is a permissioned liquidity market built on the Aave protocol. It was designed to comply with AML regulations, and every participating institution must complete Know Your Customer verification before using it. It runs on Ethereum.

Arc launched in January 2022 with Fireblocks, with around 30 trading firms on the first whitelist. The idea was to give regulated firms a way into DeFi lending without sharing a pool with anonymous participants.

Usage appears modest today. The tracked TVL is about $57,259, with no change over the past week. The wider Aave protocol is far larger, and its website promotes a different set of public markets and apps that do not centre on Arc. Governance discussions about Aave on a separate network also named Arc exist, and that should not be confused with this permissioned market.

Aave Arc uses the same pooled lending model as the main Aave protocol. Suppliers deposit assets into smart contracts and earn interest. Borrowers post collateral worth more than the loan and pay interest on what they borrow. If collateral value falls too far, positions can be liquidated.

The difference is who may take part. Arc is a separate, permissioned market in which only whitelisted addresses can interact. Participants must first pass KYC, and the whitelist is managed by a permissioning provider. Fireblocks was the partner named at launch in January 2022.

This gives institutions a way to use on-chain lending while keeping counterparties known. The trade-off is that the pool is closed, so liquidity depends on how many approved firms choose to use it.

Aave Arc does not publish a dedicated fee schedule in the material reviewed. As in other Aave markets, borrowers pay a variable interest rate and suppliers earn a share of that interest, but the actual Arc rates are not stated.

Users also pay Ethereum network gas fees on every transaction. Institutions would see current Arc rates in the market interface or in the Aave governance forum, and any custody or whitelisting charges would be agreed with the provider.

Arc inherits the Aave codebase, which Aave states has been audited and formally verified by third parties and is covered by a bug bounty. Two audits are listed for Arc. Smart contract risk still exists, as no audit rules out bugs.

Arc adds counterparty and centralisation risk because a permissioning provider controls the whitelist, and a guardian address has a role in governance through the timelock. Liquidity is thin, which can matter when closing large positions. Aave Labs states that it does not control or operate any version of the protocol. Institutions should check their own regulatory obligations before using it.

Aave Arc is for compliance-conscious institutions such as trading firms and funds that need known counterparties and AML-aligned access to on-chain lending. It does not suit individuals or anyone who wants an open, permissionless pool.