Aave v3 exploit drains up to $310K after Safe module attack

FlashLoopAdapter exploit drains $305K from Aave-linked Safe wallets on Ethereum

An attacker exploited a custom FlashLoopAdapter module used for managing leveraged Aave v3 positions, draining approximately $305,000 from two Safe multisig wallets on Ethereum on October 1, 2026. The exploit bypassed access controls in the third-party module, though Aave v3 protocol itself remained unaffected.