如何安全上手 Aave V3 Supply：钱包授权与风险参数清单
本文正文暫以英文原文展示，翻譯版本需完成來源複核後再發布。
已验证事实边界
1. Aave V3 documentation describes Aave as a non-custodial liquidity protocol with supply and borrow functionality. 2. Aave Market Operations documentation covers lending and borrowing actions such as supply, borrow, repay and withdraw. 3. Aave Market Operations documentation includes health factor preview as part of advanced operation planning. 4. Aave Market Data documentation exposes reserve fields such as isFrozen, isPaused, supplyInfo, borrowInfo and isolationModeConfig. 5. Aave Pool documentation describes the Pool contract as the main user-interaction contract and documents risk fields including loan-to-value, liquidation thresholds and caps. 6. A safe Aave onboarding flow must verify reserve state, wallet network, allowance, risk parameters and exit path before supplying assets.
收起完整分析
决策矩阵
文章表格：可橫向滑動，或聚焦表格區域後使用方向鍵。
| Check | What it means | Practical action | Unknown to keep explicit |
|---|---|---|---|
| Wallet network | the connected chain decides which market and reserve are being used | verify chain ID and official app domain before approval | wallet RPC spoofing or forked-interface risk |
| Reserve status | frozen or paused reserves change what actions are available | check reserve status before supplying or borrowing | governance change after page load |
| Allowance | token approval can outlive the intended one-time supply action | use minimal approval where practical and revoke unused allowance | wallet-specific approval UX |
| Risk parameters | LTV, liquidation threshold and caps define liquidation and capacity boundaries | read reserve parameters before using the asset as collateral | rapid parameter changes |
| Health factor preview | previewing health factor separates education from execution | simulate the user state before signing supply, borrow or withdraw transactions | oracle update between preview and execution |
| Exit path | supplying is incomplete without a withdrawal and repay plan | record how to withdraw, repay and unwind before adding funds | liquidity shortage at withdrawal time |
| Stop rule | stop when domain, chain, reserve, approval, cap or health factor evidence is unclear | do not sign until every control is visible and reversible | private wallet compromise evidence |
来源地图
- Aave Protocol Documentation：Aave V3 Overview（aave-v3-overview）
- Aave Protocol Documentation：Market Operations（aave-market-operations）
- Aave Protocol Documentation：Market Data（aave-market-data）
- Aave Protocol Documentation：Pool（aave-pool-contract）
控制说明
1. Wallet network
这一项要求读者先把公开来源翻译成操作规则。这里的含义是：the connected chain decides which market and reserve are being used。可执行动作是：verify chain ID and official app domain before approval。仍然未知的是：wallet RPC spoofing or forked-interface risk。因此本文不会把未知部分包装成收益承诺、牌照承诺、审批保证、恢复保证、结算保证、可用性保证、价格暗示或平台排名。
2. Reserve status
这里的含义是：frozen or paused reserves change what actions are available。可执行动作是：check reserve status before supplying or borrowing。仍然未知的是：governance change after page load。
操作测试也必须很窄。这就是本节保留边界的原因。
3. Allowance
这里的含义是：token approval can outlive the intended one-time supply action。可执行动作是：use minimal approval where practical and revoke unused allowance。仍然未知的是：wallet-specific approval UX。
操作测试也必须很窄。这就是本节保留边界的原因。
4. Risk parameters
这里的含义是：LTV, liquidation threshold and caps define liquidation and capacity boundaries。可执行动作是：read reserve parameters before using the asset as collateral。仍然未知的是：rapid parameter changes。
操作测试也必须很窄。这就是本节保留边界的原因。
5. Health factor preview
这里的含义是：previewing health factor separates education from execution。可执行动作是：simulate the user state before signing supply, borrow or withdraw transactions。仍然未知的是：oracle update between preview and execution。
操作测试也必须很窄。这就是本节保留边界的原因。
6. Exit path
这里的含义是：supplying is incomplete without a withdrawal and repay plan。可执行动作是：record how to withdraw, repay and unwind before adding funds。仍然未知的是：liquidity shortage at withdrawal time。
操作测试也必须很窄。这就是本节保留边界的原因。
7. Stop rule
这里的含义是：stop when domain, chain, reserve, approval, cap or health factor evidence is unclear。可执行动作是：do not sign until every control is visible and reversible。仍然未知的是：private wallet compromise evidence。
操作测试也必须很窄。这就是本节保留边界的原因。
仍需明确的未知项
- wallet RPC spoofing or forked-interface risk
- governance change after page load
- wallet-specific approval UX
- rapid parameter changes
- oracle update between preview and execution
- liquidity shortage at withdrawal time
- private wallet compromise evidence
实用结论
Aave V3 onboarding 应被写成 wallet approval、reserve-status 与 risk-parameter verification，而不是收益承诺。Aave 文档把 Aave V3 描述为 non-custodial liquidity protocol，并提供 supply、borrow、repay、withdraw 等 market operations；Aave market data 暴露 isFrozen、isPaused、supplyInfo、borrowInfo、isolationModeConfig 等 reserve status fields；Pool contract 文档说明用户交互主要通过 Pool，并包含 LTV、liquidation threshold、caps 等风险字段。实用结论是：供应资金前先核验 wallet network、reserve status、allowance、health-factor preview、caps、isolation flags 和 exit path。 本文停在证据边界内，帮助读者决定下一步核验什么，而不是把公开文档改写成私人账户、钱包、回调、政策框架、结算路径或流动性头寸在任何未来条件下都能成功的承诺。