A vulnerability in FlashLoopAdapter, a third-party Safe module for managing leveraged Aave v3 positions, was exploited against two Ethereum Safe wallets. The attacker used a fake Safe contract to spoof the adapter's authorization check, then directed an external call back to the victim Safes and invoked their module-execution capability. SlowMist estimated the direct loss at about 114.09 ETH, worth more than $300,000. Earlier transaction analysis identified 114.096151469674448809 ETH in proceeds and valued the loss at approximately $305,000, compared with an earlier transaction-time estimate of $307,065. The operation repaid roughly 1,300 WETH of debt to unlock collateral, while detailed transaction records showed 1,335.26 WETH repaid and 1,306.48 weETH released. Aave founder Stani Kulechov said the incident did not involve Aave v3's core smart contracts. Aave, which has more than $33 billion in total value locked, was affected only through infrastructure built on top of its lending protocol. Both affected Safes later disabled the module.