Aave v3 exploit drains up to $310K after Safe module attack

Each sentence links inside to the piece that supports it.

Users who relied on the affected Safe wallets would notice the loss immediately, because the attack drained funds from two multisig addresses. Aave users would also see that the incident was described as separate from Aave v3 itself, with the affected contract sitting outside the core protocol.

Before this event, the adapter was used to manage leveraged Aave v3 positions through a third-party module. After the exploit, that same setup could no longer be treated as secure in the way it had been, because the access-control weakness in FlashLoopAdapter was the route used to take funds.