{"id":108702,"date":"2026-10-02T08:24:16","date_gmt":"2026-10-02T08:24:16","guid":{"rendered":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/"},"modified":"2026-10-02T08:24:16","modified_gmt":"2026-10-02T08:24:16","slug":"aave-integration-hackad-305000-dollar-safe-modul-ethereum","status":"publish","type":"post","link":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/","title":{"rendered":"Aave-integration hackad p\u00e5 305 000 dollar via Safe-modul"},"content":{"rendered":"<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/14\/2026\/10\/content-img-1-3.jpg\" alt=\"Ett FlashLoopAdapter-hack p\u00e5 Ethereum orsakade en uppskattad nettof\u00f6rlust p\u00e5 305 000 dollar f\u00f6r tv\u00e5 Safe-pl\u00e5nb\u00f6cker, medan Aave meddelar att deras k\u00e4rnkontrakt \u00e4r op\u00e5verkade.\"><\/figure><p class=\"wp-block-paragraph\">En anpassad FlashLoopAdapter, som anv\u00e4nds f\u00f6r att hantera h\u00e4vst\u00e5ngspositioner i <a href=\"https:\/\/www.coingecko.com\/en\/coins\/aave\" target=\"_blank\" rel=\"noreferrer noopener\">Aave<\/a> V3, har utnyttjats i ett hack p\u00e5 Ethereum. Attacken resulterade i en uppskattad nettof\u00f6rlust p\u00e5 114,09 ETH, motsvarande cirka 305 000 dollar, fr\u00e5n tv\u00e5 Safe-pl\u00e5nb\u00f6cker.<\/p><p class=\"wp-block-paragraph\">Angriparen lyckades manipulera en Safe-autentiseringskontroll och anv\u00e4nde sedan ett Morpho WETH-blixtl\u00e5n (flash loan) f\u00f6r att \u00e5terbetala skulder och l\u00e5sa upp s\u00e4kerheter. De cirka 1 306 weETH som togs ut fr\u00e5n en av pl\u00e5nb\u00f6ckerna representerade det totala transaktionsfl\u00f6det och inte angriparens faktiska vinst.<\/p><p><\/p><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">SlowMist: Aave v3 Loop Safe Module Exploited, Approximately 114.09 ETH Stolen<br><br>SlowMist issued a security alert stating that Aave v3 Loop Safe Module was exploited through an access-control vulnerability in FlashLoopAdapter\u2019s open() and close() functions. The attacker allegedly\u2026 <a href=\"https:\/\/t.co\/a97iMcGWnI\">pic.twitter.com\/a97iMcGWnI<\/a><\/p>&mdash; Wu Blockchain (@WuBlockchain) <a href=\"https:\/\/x.com\/WuBlockchain\/status\/2105880875393229143?ref_src=twsrc%5Etfw\">October 2, 2026<\/a><\/blockquote><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><p class=\"wp-block-paragraph\">S\u00e4kerhetstj\u00e4nsten Defimon Alerts uppt\u00e4ckte attacken p\u00e5 Ethereum klockan 15:08:57 UTC torsdagen den 1 oktober. SlowMist publicerade sin analys under fredagen den 2 oktober, d\u00e4r de identifierade en svaghet i adapterns \u00f6ppna- och st\u00e4ngningsfunktioner. Ett skadligt kontrakt kunde utge sig f\u00f6r att vara en Safe-pl\u00e5nb\u00f6ck och returnera ett v\u00e4rde som godk\u00e4nde en kontroll avsedd att bekr\u00e4fta att en legitim pl\u00e5nbok hade aktiverat FlashLoopAdapter.<\/p><p class=\"wp-block-paragraph\">Det angriparstyrda kontraktet i AAVE-hacket tillhandah\u00f6ll \u00e4ven adapterns swap-router och calldata. Routern riktades mot ett offer och calldata st\u00e4lldes in f\u00f6r att anropa <em>execTransactionFromModule<\/em>. Eftersom FlashLoopAdapter redan var aktiverad p\u00e5 den aktuella Safe-pl\u00e5nboken, accepterades anropet som en auktoriserad modul-transaktion.<\/p><p class=\"wp-block-paragraph\">Denna sekvens f\u00f6rvandlade en begr\u00e4nsad autentiseringsbrist till full tillg\u00e5ng till pl\u00e5nbokens s\u00e4kerheter. H\u00e4ndelsen understryker vikten av pl\u00e5nboksbeh\u00f6righeter och exekveringsv\u00e4gar vid sidan av sj\u00e4lva utl\u00e5ningsprotokollets s\u00e4kerhet, en fr\u00e5ga som \u00e4ven \u00e4r central f\u00f6r infrastruktur f\u00f6r f\u00f6rvaring och autentiseringskontroller.<\/p><h2 class=\"wp-block-heading\">Blixtl\u00e5n \u00e5terbetalade Aave-skulder innan s\u00e4kerheterna togs ut<\/h2><span class=\"replacer\"><\/span><p class=\"wp-block-paragraph\">Angriparen anv\u00e4nde ett Morpho-blixtl\u00e5n i WETH f\u00f6r att \u00e5terbetala cirka 1 335 WETH av Aave-skulder kopplade till den st\u00f6rre Safe-pl\u00e5nboken. \u00c5terbetalningen frigjorde s\u00e4kerheter bundna till dess h\u00e4vst\u00e5ngsposition, vilket m\u00f6jliggjorde uttag av cirka 1 306 weETH. En andra Safe-pl\u00e5nbok f\u00f6rlorade cirka 6,4 weETH genom samma s\u00e5rbara modul.<\/p><p class=\"wp-block-paragraph\">B\u00e5da de drabbade Safe-pl\u00e5nb\u00f6ckerna hade samma \u00e4gare. Efter att de l\u00e5nade medlen reglerats och vissa tillg\u00e5ngar konverterats, beh\u00f6ll angriparen cirka 114,09 ETH, vilket i s\u00e4kerhetsrapporter v\u00e4rderades till omkring 305 000 dollar.<\/p><p class=\"wp-block-paragraph\">Skillnaden mellan bruttofl\u00f6det och den realiserade f\u00f6rlusten \u00e4r v\u00e4sentlig. Det stora uttaget av s\u00e4kerheter gjordes f\u00f6r att m\u00f6jligg\u00f6ra skuldsanering och avveckling av positionen; det ska inte l\u00e4sas som den faktiska stulna summan. De rapporterade int\u00e4kterna var den ETH som \u00e5terstod efter dessa transaktionssteg.<\/p><h2 class=\"wp-block-heading\">Aave: K\u00e4rnkontrakten \u00e4r inte p\u00e5verkade<\/h2><span class=\"replacer\"><\/span><p class=\"wp-block-paragraph\">Aaves grundare och VD, Stani Kulechov, meddelade att den s\u00e5rbara komponenten var en extern integration snarare \u00e4n ett Aave V3-kontrakt, och att h\u00e4ndelsen hade &#8221;noll effekt p\u00e5 Aave v3&#8221;.<\/p><p><\/p><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">This is not Aave v3 contract, it\u2019s third party external adapter built on top of Aave, zero effect on Aave v3.<\/p>&mdash; Stani (@StaniKulechov) <a href=\"https:\/\/x.com\/StaniKulechov\/status\/2105892291638436078?ref_src=twsrc%5Etfw\">October 2, 2026<\/a><\/blockquote><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><p class=\"wp-block-paragraph\">SlowMist klassificerade incidenten som en s\u00e5rbarhet i ett smart kontrakt och tillskrev s\u00e4kerhetsbristen den manipulerbara Safe-kontrollen. Defimon beskrev FlashLoopAdapter som en Safe-modul f\u00f6r att \u00f6ppna och st\u00e4nga h\u00e4vst\u00e5ngsbaserade Aave V3-loopar och uppskattade f\u00f6rlusten till cirka 305 000 dollar.<\/p><p class=\"wp-block-paragraph\">FlashLoopAdapter \u00e4r ett anpassat kontrakt byggt ovanp\u00e5 Aave V3 f\u00f6r att hantera h\u00e4vst\u00e5ngspositioner i Safe-pl\u00e5nb\u00f6cker som aktiverat modulen. Safe-moduler kan exekvera transaktioner utan att kr\u00e4va \u00e4garens standardfl\u00f6de f\u00f6r varje transaktion, vilket st\u00f6der automatisering men ocks\u00e5 ger en auktoriserad modul en v\u00e4g till pl\u00e5nbokens tillg\u00e5ngar.<\/p><p class=\"wp-block-paragraph\">I detta fall var det inte modulens beh\u00f6righet i sig som var problemet, utan adapterns logik f\u00f6r autentisering och exekvering. Incidenten \u00e4r d\u00e4rf\u00f6r ett misslyckande f\u00f6r DeFi-s\u00e4kerheten i integrationslagret, och inte ett bevis p\u00e5 att Aave V3:s utl\u00e5ningspooler har komprometterats.<\/p><p class=\"wp-block-paragraph\">K\u00e4llan noterar \u00e4ven en separat incident i september som involverade en Safe-pl\u00e5nbok, cirka 2 900 rsETH och svag auktorisering i en exekutor kopplad till en aktiverad modul, men dessa tv\u00e5 h\u00e4ndelser involverade olika kontrakt och attackv\u00e4gar.<\/p>","protected":false},"excerpt":{"rendered":"<p>En s\u00e5rbarhet i FlashLoopAdapter p\u00e5 Ethereum ledde till en f\u00f6rlust av 114 ETH. Aave bekr\u00e4ftar att deras protokollk\u00e4rna inte p\u00e5verkades av attacken.<\/p>\n","protected":false},"author":261,"featured_media":108700,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[8,1],"tags":[],"editors":[76],"sponsored_companies":[],"class_list":["post-108702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-altcoin-news","category-news","editors-malin-engdahl"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Aave-integration hackad p\u00e5 305 000 dollar via Safe-modul<\/title>\n<meta name=\"description\" content=\"En s\u00e5rbarhet i FlashLoopAdapter p\u00e5 Ethereum ledde till en f\u00f6rlust av 114 ETH. Aave bekr\u00e4ftar att deras protokollk\u00e4rna inte p\u00e5verkades av attacken.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/\" \/>\n<meta property=\"og:locale\" content=\"sv_SE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Aave-integration hackad p\u00e5 305 000 dollar via Safe-modul\" \/>\n<meta property=\"og:description\" content=\"En s\u00e5rbarhet i FlashLoopAdapter p\u00e5 Ethereum ledde till en f\u00f6rlust av 114 ETH. Aave bekr\u00e4ftar att deras protokollk\u00e4rna inte p\u00e5verkades av attacken.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/\" \/>\n<meta property=\"og:site_name\" content=\"Cryptonews Sverige\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-02T08:24:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/14\/2026\/10\/aave-integration-hackad-305000-dollar-safe-modul-ethereum-featured.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"675\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:description\" content=\"En s\u00e5rbarhet i FlashLoopAdapter p\u00e5 Ethereum ledde till en f\u00f6rlust av 114 ETH. Aave bekr\u00e4ftar att deras protokollk\u00e4rna inte p\u00e5verkades av attacken.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/14\/2026\/10\/aave-integration-hackad-305000-dollar-safe-modul-ethereum-featured.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@malin_engdaahl\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Aave-integration hackad p\u00e5 305 000 dollar via Safe-modul","description":"En s\u00e5rbarhet i FlashLoopAdapter p\u00e5 Ethereum ledde till en f\u00f6rlust av 114 ETH. Aave bekr\u00e4ftar att deras protokollk\u00e4rna inte p\u00e5verkades av attacken.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/","og_locale":"sv_SE","og_type":"article","og_title":"Aave-integration hackad p\u00e5 305 000 dollar via Safe-modul","og_description":"En s\u00e5rbarhet i FlashLoopAdapter p\u00e5 Ethereum ledde till en f\u00f6rlust av 114 ETH. Aave bekr\u00e4ftar att deras protokollk\u00e4rna inte p\u00e5verkades av attacken.","og_url":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/","og_site_name":"Cryptonews Sverige","article_published_time":"2026-10-02T08:24:16+00:00","og_image":[{"width":1200,"height":675,"url":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/14\/2026\/10\/aave-integration-hackad-305000-dollar-safe-modul-ethereum-featured.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_description":"En s\u00e5rbarhet i FlashLoopAdapter p\u00e5 Ethereum ledde till en f\u00f6rlust av 114 ETH. Aave bekr\u00e4ftar att deras protokollk\u00e4rna inte p\u00e5verkades av attacken.","twitter_image":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/14\/2026\/10\/aave-integration-hackad-305000-dollar-safe-modul-ethereum-featured.jpg","twitter_creator":"@malin_engdaahl","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/#article","isPartOf":{"@id":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/"},"author":{"name":"malinengdahl","@id":"https:\/\/cryptonews.com\/se\/#\/schema\/person\/35a0ea25b2d1885dcdd317f879d308ef"},"headline":"Aave-integration hackad p\u00e5 305 000 dollar via Safe-modul","datePublished":"2026-10-02T08:24:16+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/"},"wordCount":648,"commentCount":0,"publisher":{"@id":"https:\/\/cryptonews.com\/se\/#organization"},"image":{"@id":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/14\/2026\/10\/aave-integration-hackad-305000-dollar-safe-modul-ethereum-featured.jpg","articleSection":["Altcoin Nyheter","Nyheter"],"inLanguage":"sv-SE","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/cryptonews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/","url":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/","name":"Aave-integration hackad p\u00e5 305 000 dollar via Safe-modul","isPartOf":{"@id":"https:\/\/cryptonews.com\/se\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/#primaryimage"},"image":{"@id":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/14\/2026\/10\/aave-integration-hackad-305000-dollar-safe-modul-ethereum-featured.jpg","datePublished":"2026-10-02T08:24:16+00:00","description":"En s\u00e5rbarhet i FlashLoopAdapter p\u00e5 Ethereum ledde till en f\u00f6rlust av 114 ETH. Aave bekr\u00e4ftar att deras protokollk\u00e4rna inte p\u00e5verkades av attacken.","breadcrumb":{"@id":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/#breadcrumb"},"inLanguage":"sv-SE","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/"]}],"author":[]},{"@type":"ImageObject","inLanguage":"sv-SE","@id":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/#primaryimage","url":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/14\/2026\/10\/aave-integration-hackad-305000-dollar-safe-modul-ethereum-featured.jpg","contentUrl":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/14\/2026\/10\/aave-integration-hackad-305000-dollar-safe-modul-ethereum-featured.jpg","width":1200,"height":675,"caption":"Abstrakt illustration av en brist i auktoriseringen av en DeFi-pl\u00e5nbok som exponerar s\u00e4kerheter genom en flash-loan-attack"},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.com\/se\/news\/aave-integration-hackad-305000-dollar-safe-modul-ethereum\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.com\/se\/"},{"@type":"ListItem","position":2,"name":"Aave-integration hackad p\u00e5 305 000 dollar via Safe-modul"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.com\/se\/#website","url":"https:\/\/cryptonews.com\/se\/","name":"Cryptonews","description":"","publisher":{"@id":"https:\/\/cryptonews.com\/se\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.com\/se\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sv-SE"},{"@type":"Organization","@id":"https:\/\/cryptonews.com\/se\/#organization","name":"Cryptonews","url":"https:\/\/cryptonews.com\/se\/","logo":{"@type":"ImageObject","inLanguage":"sv-SE","@id":"https:\/\/cryptonews.com\/se\/#\/schema\/logo\/image\/","url":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/14\/2024\/07\/15121047\/poker-v2-razz.svg","contentUrl":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/14\/2024\/07\/15121047\/poker-v2-razz.svg","width":1,"height":1,"caption":"Cryptonews"},"image":{"@id":"https:\/\/cryptonews.com\/se\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/posts\/108702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/users\/261"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/comments?post=108702"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/posts\/108702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/media\/108700"}],"wp:attachment":[{"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/media?parent=108702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/categories?post=108702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/tags?post=108702"},{"taxonomy":"editors","embeddable":true,"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/editors?post=108702"},{"taxonomy":"sponsored_companies","embeddable":true,"href":"https:\/\/cryptonews.com\/se\/wp-json\/wp\/v2\/sponsored_companies?post=108702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}