Two Safe Wallets suffered a net loss of approximately 114.09 ETH, worth about $305,000, in an attack targeting a custom FlashLoopAdapter used to manage leveraged positions on Aave V3. The attacker exploited a weakness in the adapter’s open and close functions by spoofing a Safe authentication check to impersonate a legitimate wallet. The attack used a Morpho WETH flash loan to repay approximately 1,335 WETH of Aave debt and unlock roughly 1,306 weETH in gross collateral, with net proceeds of approximately 114.09 ETH after settling the borrowed funds. Aave confirmed that its core contracts were not affected, as the incident was a security failure at the DeFi integration layer.
Source: Read the original article

