Odaily Planet Daily News According to monitoring by Stani Kulechov, Aave founder Stani Kulechov said that what was exploited was a third-party external adapter built on Aave v3, and the Aave v3 contract itself was not affected. The FlashLoopAdapter of the Aave v3 Loop Safe module involved has open() and close() access control vulnerabilities. The attacker stole approximately 114.09 ETH from two Safe multi-signature addresses by forging Safe certification and arbitrary module execution, and repaid approximately 1,300 WETH debt to unlock the collateral.
Aave v3 contract is not affected, founder responds to attack
Related news
Talis Protocol market contract attacked, approximately 5,700 escrowed NFTs stolen.
PANews November 2 news: Talis Protocol posted a disclosure that on October 31, an attacker exploited a vulnerability in its marketplace and auction contracts on...
What Is EIP-7702? The Ethereum Upgrade Behind the Binance Hack Incident
EIP-7702 allows regular Ethereum wallets to run smart contract code, thereby enabling batch transactions and sponsored transactions (paying Gas fees on behalf o...