Aave Loop Module Flaw Exposed: $307,065 Stolen

On October 1, 2026, around 114.09 ETH flowed out of two Safe multisig wallets, with the attacker repaying around 1,300 WETH of debt and making a profit of 114.09 ETH. According to SlowMist, the access control of the FlashLoopAdapter, a helper contract around Aave v3, could be bypassed, allowing the attacker to trigger the module execution in the victim's Safe itself.

The attack used a forged Safe contract that answered every permission query with a 'yes,' and the internal _swap() function left the choice of the router and call data to the caller, allowing the attacker to redirect a swap into an arbitrary transfer.

The affected wallets had an active loop module switched on, which is a contract that bundles all the steps of a cycle of depositing and borrowing into one transaction. The loop module is used for leveraged staking, where users deposit a liquid staking token as collateral, borrow ether against it, swap the borrowed ether back into the same staking token, and deposit again.

Aave's core pools and the Safe core were untouched, and only wallets with an active loop module were affected. The incident is not the first of its kind, as a similar module flaw in another context had already moved a sum in the millions without a signature in September.