Aave V3 Hit by External Module Vulnerability Resulting in $305,000 Theft

A hacker exploited a vulnerability in the FlashLoopAdapter module used by Aave V3 to control positions, resulting in the theft of approximately $305,000 (114 ETH) from two Safe multisig wallets.

The affected assets were managed through the external adapter, which was built on top of the Aave protocol.

Aave founder Stani Kulechov clarified that the vulnerability did not impact the Aave protocol itself but was related to a third-party module.