Aave founder Stani Kulechov said the incident flagged in a SlowMist report did not involve an attack on Aave v3 contracts themselves. The issue, he said, was tied to a third-party external adapter built on top of Aave v3, and had no impact on the core Aave v3 protocol. The response came after reports that a Safe module used in an Aave v3 looping strategy was exploited, leading to losses of about 114.09 ETH, or roughly $310,000. Earlier reporting cited an access control flaw in FlashLoopAdapter’s open() and close() functions. According to that account, the attacker forged Safe authorization and executed arbitrary modules, stealing around 114.09 ETH from two Safe multisig addresses. The attacker also repaid about 1,300 WETH in debt to unlock collateral.
On Oct. 2, Aave founder Stani Kulechov responded to a SlowMist report about an exploit involving a Safe module used in an Aave v3 looping strategy, which was said to have caused losses of about 114.09 ETH, or roughly $310,000.
Kulechov said the incident was not an attack on Aave v3 contracts. He added that the affected component was a third-party external adapter built on top of Aave v3, and that the event did not affect Aave v3 itself.
In earlier coverage, BlockBeats reported that the Aave v3 Loop Safe module had been attacked. According to that report, the attacker exploited an access control flaw in FlashLoopAdapter’s open() and close() functions, forged Safe authentication, and used arbitrary module execution to steal about 114.09 ETH from two Safe multisig addresses. The attacker also repaid about 1,300 WETH of debt to unlock collateral.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
