Zenoo

Zenoo Compliance Brief

Aave loses $290m in major DeFi hack, exposing insurance gaps

Plus, FinCEN and SEC fine Canaccord Genuity $80m, State Street pays $7.5m for Russian sanctions breaches, and OFAC sanctions Nicaragua gold operators.

16 April 2026 · 4 min read

Aave loses $290m in major DeFi hack, exposing insurance gaps

The Aave protocol got hit hard on April 18 with a $290 million theft that's forced the DeFi sector to reckon with its insurance problem. Separately, enforcement actions landed on some familiar names this week: Canaccord Genuity copped an $80 million fine from FinCEN and the SEC for AML failures, State Street took a $7.5 million OFAC hit for Russia sanctions lapses, and Nicaragua's gold sector just got hammered with new designations. We've got the details on what went wrong and what it means for your compliance picture.

In today's brief

  • 1 Does the Aave hack prove DeFi platforms lack adequate loss-recovery mechanisms?
  • 2 Did Canaccord's OTC market-making desk operate without basic AML controls, and what does that mean for your surveillance gaps?
  • 3 What Treasury's OFAC fine signals about sanctions screening maturity in custody banking
  • 4 How deep does your Nicaragua exposure screening go, and are you capturing beneficial ownership at the 50% threshold?
Latest Developments

Subscribe to keep reading.

This content is free, but you must be subscribed to the Zenoo Compliance Brief to continue reading.

Free · Curated by compliance practitioners · Zero spam

Already a subscriber?