According to BlockBeats news, on October 2, in response to SlowMist’s report that the Safe module used in the Aave v3 cycle strategy was exploited, resulting in a loss of approximately 114.09 ETH (approximately $310,000), Aave founder Stani Kulechov stated that the incident was not an attack on the Aave v3 contract.
Stani Kulechov said that the module involved is a third-party external adapter built on Aave v3, and the incident has no impact on Aave v3 itself.
Blockbeats previously reported that the Aave v3 Loop Safe module was attacked. The attacker exploited the open()/close() access control vulnerability of FlashLoopAdapter, stole approximately 114.09 ETH from two Safe multi-signature addresses by forging Safe certification and arbitrary module execution, and repaid approximately 1300 WETH debt to unlock the collateral.