Monad

Safe

Gnosis

Aave

<p><strong>A security alert from blockchain security firm SlowMist reports that the Aave v3 Loop Safe Module has been exploited, with approximately 114.09 ETH stolen from affected users. The alert names a specific module within the Aave v3 ecosystem as the attack vector, though full technical details of the exploit have not been independently verified at the time of publication.</strong></p>
<h2 id="slowmist-issues-alert-on-the-aave-v3-loop-safe-module">SlowMist Issues Alert on the Aave v3 Loop Safe Module</h2>
<p><a href="https://slowmist.com" rel="noopener noreferrer nofollow">SlowMist</a>, a widely followed on-chain security monitoring firm, issued the alert flagging the Aave v3 Loop Safe Module as compromised. The report identifies the module by name, distinguishing this incident from a broader Aave v3 protocol vulnerability. For related coverage, see <a href="https://www.theccpress.com/aave-monad-market-100-million-deposits-two-days-after-launch/" rel="noopener noreferrer nofollow">Aave Monad Market Surpasses $100M in Deposits Two Days After Launch</a>.</p>
<p>This is not the first time a looping adapter attached to Aave has drawn scrutiny. An earlier incident saw a <a href="https://www.theccpress.com/slowmist-flashloopadapter-flaw-safe-wallets-collateral-drain/" rel="noopener noreferrer nofollow">FlashLoopAdapter flaw drain two Safe wallets of their collateral</a>, a structurally similar pattern involving third-party modules layered on top of Aave’s core contracts. The <a href="https://www.theccpress.com/aave-founder-310k-exploit-third-party-adapter/" rel="noopener noreferrer nofollow">Aave founder also previously confirmed a $310K exploit hitting a third-party adapter</a>, reinforcing that the risk surface often lies at the integration layer rather than inside Aave’s audited core.</p>
<h2 id="approximately-114-09-eth-reported-stolen">Approximately 114.09 ETH Reported Stolen</h2>
<p>According to the SlowMist alert, approximately 114.09 ETH was stolen in the exploit. The figure is attributed solely to SlowMist’s report and has not been confirmed by an independent on-chain source at the time of writing. Readers should treat it as a reported estimate until corroborated by a block explorer trace or official statement.</p>
<p>The loss amount is notable in context: <a href="https://www.theccpress.com/aave-47-8-percent-active-onchain-loans-token-terminal/" rel="noopener noreferrer nofollow">Aave controls 47.8% of active onchain loans</a>, making its module ecosystem a high-value target. Any exploit touching Aave-adjacent infrastructure draws immediate attention from both users and security researchers tracking the <a href="https://defillama.com/protocol/aave" rel="noopener noreferrer nofollow">protocol’s total value locked</a>.</p>
<h2 id="what-this-means-for-aave-users">What This Means for Aave Users</h2>
<p>Users who interact with loop or leverage strategies built on top of Aave v3, particularly those routed through Safe (formerly Gnosis Safe) wallet infrastructure, should review their current exposure. If you have active positions using a looping module, check whether the specific module you are using matches the one named in the SlowMist alert before taking any action.</p>
<p>Do not rely solely on this report. Monitor the official <a href="https://www.theccpress.com/aave-unfreeze-73m-eth-kelp-dao-court-battle/" rel="noopener noreferrer nofollow">Aave governance channels</a> and SlowMist’s verified social accounts for updated findings and any remediation steps. The Aave protocol itself has not issued a statement at time of publication, and no patch or mitigation has been publicly announced.</p>
<p>Is this another reminder that third-party adapters remain the weakest link in DeFi’s security chain, or does it point to something deeper in how looping strategies interact with Safe module permissions?</p>
<p style="font-size:13px;color:#888;border-top:1px solid #333;padding-top:12px;margin-top:30px;">Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.</p>
<p>The article <a href="https://www.theccpress.com/?p=48796" rel="noopener noreferrer nofollow">Aave v3 Loop Safe Module Exploited; 114.09 ETH Stolen</a> first featured on <a href="https://theccpress.com/" rel="noopener noreferrer nofollow">theccpress.com</a>.</p>

Aave v3 Loop Safe Module Exploited; 114.09 ETH Stolen

Table of Contents

Cryptocurrency Press

Other articles published on Oct 4, 2026

Join our free newsletter for daily crypto updates!