FlashLoopAdapter Exploit Drains $305K From Two Aave-Linked Safes
- —The flaw was in the custom FlashLoopAdapter module, not in Aave V3 core contracts
- —One Safe lost 1,306.48 weETH after repaying 1,335 WETH of Aave debt
- —A second Safe lost about 6.4 weETH; the attacker retained 114.1 ETH
- —The transaction used a WETH flash loan from Morpho
Why it matters: The incident highlights how custom Safe modules add attack surface even without compromising underlying Aave contracts.
Source: The Crypto Times