Hack of Aave-Linked External Adapter Steals About $305,000; Aave V3 Unaffected
Summary
- An external adapter built on Aave was hit by a hack, resulting in losses of about 114.09 Ether.
- The hack stemmed from an access-control vulnerability in FlashLoopAdapter, a third-party tool used for leveraged positions on Aave V3.
- Aave’s founder said the incident had no impact on the Aave V3 protocol itself.
Forecast Trend Report by Period
A hack targeting an external adapter built on the decentralized-finance lending protocol Aave resulted in user losses, though the Aave V3 protocol itself was not affected.
Cointelegraph reported on October 2 that blockchain security firm SlowMist had identified an access-control vulnerability in FlashLoopAdapter, a third-party adapter used to open and close leveraged positions on Aave V3.
The attacker used a fake Safe contract to bypass the adapter’s authentication process, then stole assets from victims’ Safe multisignature wallets. Two wallets lost about 114.09 Ether, worth roughly $305,000, in the attack.
Aave founder Stani Kulechov said the issue occurred in a third-party external adapter built on top of Aave, not in the Aave V3 contracts. He added that Aave V3 was not affected.
Uk Jin
wook9629@bloomingbit.ioH3LLO, World! I am Uk Jin.