Skip to content
THREATWIRE

DeFi Security · Vulnerability class

Flash-loan amplification

Borrowing a very large amount for a single transaction lets an attacker move a price or a balance, then undo the loan within the same block.

DatabaseIncidentsChainsProtocolsVulnerabilities

The concept

A flash loan is a tool, not a root cause. It matters because it removes the capital barrier from other bugs such as spot-price dependence or share-accounting errors.

Defensive lessons

  • Do not treat a single-block price as truth.
  • Assume any bug that needs capital can be funded for free.
  • Ask what the loan amplified, not only that it was used.

Stored incidents