Aave founder says V3 unaffected after third-party adapter exploit drains $305K
Aave founder Stani Kulechov said Aave v3 was unaffected after an attacker exploited a third-party adapter to drain about $305,000 from two Safe multisig wallets.
Aave founder Stani Kulechov confirmed that Aave v3 was not affected by a recent exploit that drained approximately $305,000 from two Safe multisig wallets via a third-party adapter. The attacker took advantage of an access-control flaw in the adapter, which allowed them to control transaction data and execute unauthorized transactions through the victim Safes.
SlowMist, a blockchain security firm, identified the vulnerable FlashLoopAdapter contract and the attacker's wallet but did not report the incident to Aave v3. The stolen funds amounted to around 114.09 Ether (ETH), valued at roughly $305,000. The attack targeted a module used for opening and closing leveraged Aave v3 positions, and around 1,300 wrapped Ether (WETH) in debt was repaid during the attack to unlock collateral.
Brief written by urgent.news from Cointelegraph's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
