Aave founder Stani Kulechov said on October 2 that Aave v3 was unaffected by an exploit that drained roughly $305,000 from two Safe multisig wallets through a third-party adapter. Kulechov stressed that the compromised contract was external to Aave, with the incident having “zero effect” on Aave v3 itself.
This is not Aave v3 contract, it’s third party external adapter built on top of Aave, zero effect on Aave v3.
— Stani (@StaniKulechov) October 2, 2026
The attack targeted FlashLoopAdapter, a module used to open and close leveraged positions through Safe wallets on Aave. An access-control flaw allowed the attacker to bypass authorization checks and drain about 114.09 ETH after unwinding collateral positions. The exploit affected third-party infrastructure built on top of Aave rather than the core lending protocol, an important distinction for users of Aave.
The immediate focus is whether the affected adapter is patched and whether additional wallets using the same integration require remediation. Aave v3 users will be watching for any follow-up security review or guidance covering third-party modules, while the protocol itself continues operating without reported losses from the incident.
Source: Stani Kulechov.
Disclaimer: Crypto Economy Flash News are based on verified public and official sources. Their purpose is to provide fast, factual updates about relevant events in the crypto and blockchain ecosystem.
This information does not constitute financial advice or investment recommendation. Readers are encouraged to verify all details through official project channels before making any related decisions.
