Third-party Aave adapter exploit drains 114 ETH from Safes
An attacker exploited a third-party adapter on Aave v3, draining 114.09 ETH ($305,000) from two Safe multisig wallets. The flaw was in the FlashLoopAdapter, not Aave's core contracts. Aave founder Stani Kulechov confirmed the incident did not affect Aave v3's codebase. The attacker bypassed authentication checks to withdraw collateral. SlowMist traced the loss to the vulnerable adapter, not Aave itself.
How this was made
The 30-second read
Why it matters
The incident underscores the risk of unaudited peripheral modules in DeFi, possibly prompting tighter audits and user caution.
Market read
Security breach in a DeFi adapter may affect sentiment toward AAVE and similar lending protocols.
What to watch
Potential for rapid patching of the adapter and community support could mitigate long‑term damage.
Background
A third‑party FlashLoopAdapter built on Aave v3 was exploited to drain ~114 ETH from two Safe multisig wallets, with no impact on Aave's core contracts.
Ticker impact
Aave protocol was referenced as the platform whose third‑party adapter was exploited, raising security concerns for the AAVE token.
likely downward pressure as traders reassess risk exposure
The exploit did not affect core contracts but highlights a vulnerable integration; market participants often penalize tokens linked to security incidents.
Market effects
May prompt broader scrutiny of DeFi adapters and third‑party integrations across lending protocols.
Limited to crypto markets; no direct impact on traditional equity markets.
Highlights systemic risk in decentralized finance, relevant to global crypto investors.
Counterpoint
The breach was limited to a single adapter; core Aave contracts remain secure, so the token may recover quickly.
Key entities
- protocolAave
Decentralized lending platform whose third‑party adapter was exploited.
- smart contractFlashLoopAdapter
Third‑party module used to manage leveraged Aave v3 positions.
- security firmSlowMist
Identified and reported the exploit.
