News

Public · Published

SlowMist: Aave v3 Loop Safe Module Exploited, Approximately 114.09 ETH Stolen SlowMist issued a security alert stating that Aave v3 Loop Safe Module was exploited through an access-control vulnerability in FlashLoopAdapter's open() and close() functions. The attacker allegedly

SlowMist issued a security alert stating that the Aave v3 Loop Safe Module was exploited through an access-control vulnerability in FlashLoopAdapter's open() and close() functions, and approximately 114.09 ETH was stolen.

Published:

Updated:

What happened

SlowMist issued a security alert stating that the Aave v3 Loop Safe Module was exploited through an access-control vulnerability in FlashLoopAdapter's open() and close() functions, and approximately 114.09 ETH was stolen.

Confirmed

Global impact / market context

If a module tied to Aave v3 can be drained through access-control flaws, users may question the safety of borrowed money and deposited collateral, potentially reducing capital spending or borrowed money in similarly structured products.

Analyst inference

The alert links the loss of about 114.09 ETH to one module, not to Aave v3 core contracts, so the immediate cash available and revenue impact appears limited unless other integrations share the same access-control weakness.

Analyst inference

What to watch

  1. SlowMist says FlashLoopAdapter's open() and close() functions had an access-control vulnerability, which means unauthorized callers could trigger them, and about 114.09 ETH was stolen. Confirmed
  2. Aave or the module's developers could pause the affected Loop Safe Module and review other integrations using similar open() and close() access-control patterns to prevent further losses. Proposed
  3. If the flaw affects only this module, the broader Aave v3 market may see little change in deposits, borrowed money, or investor positioning beyond confidence in third-party modules. Analyst inference

Affected assets

  • ETH — Ethereum

Evidence