
Aave v3 exploit drains up to $310K after Safe module attack
An attacker forged Safe authentication to abuse a third-party FlashLoopAdapter module, draining two multisigs while Aave and Safe themselves stayed intact An attacker drained two Safe multisig wallets on Ethereum on October 1, 2026. They did it by exploiting a third-party.








