Security Incident · ETH Ecosystem
FlashLoopAdapter（Aave V3 Loop Safe Smart Contract Vulnerability: $305.00K Reported Loss
The attacker exploited an access-control vulnerability in FlashLoopAdapter by spoofing Safe authentication and bypassing the module authorization check.
- Reported loss
- $ 305,000
- Attack category
- Smart Contract Vulnerability
Incident Overview
By controlling the swapRouter and swapCalldata, the attacker targeted the victim Safes with execTransactionFromModule() and executed unauthorized transactions. The attacker also used a Morpho WETH flash loan to repay the affected Safe’s Aave V3 debt and unlock its collateral, ultimately draining weETH from two Safes and retaining approximately 114.09 ETH, worth about $305,000.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.