Aave v3 Loop Safe Exploit Drains 114 ETH From $30B Protocol
- —Attacker repaid ~1,300 WETH of debt and withdrew 114.09 ETH in collateral
- —Vulnerability lay in the open() and close() functions of FlashLoopAdapter
- —ISafe.isModuleEnabled check could be bypassed via a malicious Safe
- —Aave v3 holds over $30B in TVL across Ethereum, Arbitrum, Optimism and Base
Why it matters: Risk is shifting from core protocol logic to third-party automation modules, a key concern for institutions and DAOs relying on Safe custody.
Source: TronWeekly