Aave Founder Clarifies That v3 Is Not Affected by Recent Attack on Third-Party Module

Huoxing Finance reports that on October 2, in response to SlowMist’s report regarding the exploitation of the Safe module used in Aave v3’s loop strategy, resulting in a loss of approximately 114.09 ETH (~$3.1 million), Aave founder Stani Kulechov stated that this incident was not an attack on the Aave v3 smart contracts. Stani Kulechov explained that the affected module is a third-party external adapter built on top of Aave v3, and the incident had no impact on Aave v3 itself. Previously, Blockbeats reported that the Aave v3 Loop Safe module was attacked; the attacker exploited an access control vulnerability in the FlashLoopAdapter’s open()/close() functions, forging Safe authentication and executing arbitrary modules to steal approximately 114.09 ETH from two Safe multisig addresses and repaying approximately 1,300 WETH in debt to unlock collateral.