Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
ETH Blockchain security company SlowMist issued an alert: Aave v3 cyclic security module was utilized
Blockchain security company SlowMist issued an alert, reporting that Aave v3 's Loop Safe Module was utilized, and approximately 114.09 ETH was stolen in the incident. The alert clearly identifies the names of the affected components and flags the theft as an active security incident for Aave protocol users and DeFi participants monitoring risks along the chain.
SlowMist alert detailed explanation: What happened to the Aave v3 cycle safety module?
As an on-chain threat intelligence and smart contract auditor, SlowMist identified the "Aave v3 Loop Safe Module" as an attacked component. The Loop Safe Module is an auxiliary layer built on top of Aave v3 's core lending infrastructure and is designed to facilitate the establishment of circular leveraged positions within defined safety boundaries. This incident is fundamentally different from the intrusion of Aave's core agreement contract.
It is worth noting that the alert did not confirm specific exploitation methods or identify attackers, and these details remained unverified at the time of release. Therefore, users using round-based strategies should be cautious about any unproven remedies circulating in social channels until the relevant development team releases a formal post-incident analysis report.
Such DeFi module utilization events are structurally similar to ResolvLabs USR suspected utilization events. Chain analysts point out that in such incidents, auxiliary contracts or packaging contracts built on top of the underlying protocol often become the attack surface rather than the underlying protocol itself.
About 114.09 ETH stolen: Security implications for DeFi users
The amount of the loss was reported to be approximately 114.09 ETH. Since the US dollar equivalent amount was not confirmed in SlowMist's alert and the latest Ethereum market data was lacking at the time of release, in order to avoid providing unfounded figures, no US dollar conversion is made here.
Aave v3 's core lending pool has not been confirmed affected. This distinction is crucial for users: Users who hold collateral or debt positions directly in the main Aave v3 market have very different exposure than those who use cyclical or leverage modules superimposed on the top. Anyone with active positions in Aave v3 revolving products should verify their exposure against official Aave governance or security communications.
Cases such as the $42 million GMX exploit incident on Arbitrum and the $27 million BigONE exchange hack show that smart contract security failures usually do not stem from core protocol logic, but occur in modules, wrappers, or off-chain integrations that interact with the audited underlying contract. The BigONE hot wallet exploitation incident also proved that peripheral components have independent attack surfaces and may not have been subject to the same level of audit review.
从去中心化协议安全的角度来看，此次事件凸显了组合性风险评估中反复出现的缺口：辅助模块往往继承了其所包裹的已审计协议所隐含的信任。当这些模块在执行过程中遭到破坏时，与循环模块进行程序化交互的链上AI代理基础设施和自动化DeFi策略将面临复合风险，因为自动化的头寸管理在没有显式熔断逻辑的情况下无法自行中断。
