An SEC investigation into the Aave protocol opened around 2021 concluded in December 2025 without any enforcement recommendation