Aave founder Stani Kulechov said the Loop Safe attack exploited a third-party external adapter built on Aave v3, not Aave v3 contracts themselves. The incident highlights the distinction between Aave’s core protocol and external integrations built on top of it.