Aave-Linked Safe Wallet Module Exploited, Over $300,000 Drained From Two Wallets

A custom module called FlashLoopAdapter, used for Aave V3 leveraged positions, was exploited on October 1. The exploit relied on an access-control flaw, not a flaw in Aave's core lending contracts. Two Safe wallets were affected, with more than 1,300 weETH taken from one. The attacker used a WETH flash loan.