FlashLoopAdapter Exploit: How a Caller-Authentication Flaw in Aave V3 Safe Module Drained $305K

Decentralized finance security extends far beyond the core smart contracts of major lending protocols. As users increasingly rely on peripheral modules to automate complex strategies, the integration layer itself becomes a prime target for malicious actors. This reality was starkly illustrated on October 1, 2026, when a custom Ethereum module known as FlashLoopAdapter was exploited, resulting in the loss of approximately $305,000 to $310,000 from two Safe wallets. Crucially, the breach did not compromise Aave V3’s core lending infrastructure. Instead, attackers identified and leveraged a criti