Aave v3 Loop Safe module exploited for 114 ETH, KuCoin reports
CIE News ·
KuCoin reported an attack on the Aave v3 Loop Safe module that drained approximately 114.09 ETH, worth around $305,000, via an access control vulnerability.
An attacker targeted the Aave v3 Loop Safe module on October 2, stealing approximately 114.09 Ethereum (ETH) valued at around $305,000, according to KuCoin. The incident reportedly stemmed from an access control flaw in the FlashLoopAdapter contract's open and close functions, enabling the attacker to forge Safe authentication checks on two multisig wallets. Security analysts indicated that 1,300 Wrapped Ether (WETH) in debt was repaid to unlock collateral, while Aave core lending pools remained unaffected.