Index
Search
Search the public record. Drafts and scheduled notes are not included.
Medium
defi
FlashLoopAdapter: how a spoofable caller check cost two Safe wallets 114 ETH
On 1 October 2026 an attacker used a flash loan and a fake Safe to make a third-party Aave adapter run their instructions inside two real Safe wallets, taking about 114 ETH (around $305,000). Aave v3 and Safe's own contracts were not at fault, according to analysts and Aave's founder.
Published 3h ago
CriticalPoC Available
CVE-2026-13043
WatchGuard Endpoint Security PSKMAD missing authentication
Info disclosure
Published 1 Oct 2026