Aave Suffers Flash Loan Exploit, $10M Drained

The exploit seems to have impacted only Aave v1.

Man shocked holding a phone next to a cute small white ghost in front of a storm with lightning.
  • An attacker exploited Aave and Yearn Finance with a flash loan.
  • The address associated with the attack stole at least $10 million.
  • Aave responded to the attack by saying that it was looking into it.

One of the oldest and most battle-tested decentralized finance (DeFi) protocols, Aave, has just experienced an exploit.

On Thursday, an exploiter attacked Aave and Yearn Finance, another DeFi protocol, using a flash loan and drained more than $10 million.


According to blockchain security firm Lookonchain, all the stolen $10 million is in stablecoins DAI, USDC, BUSD, TUSD, and USDT.

The team behind the protocol said on Twitter that they are aware of the exploit and that the attack hasn’t impacted Aave v2 and v3.

Aave Chan Initiative founder Marc Zeller said on Twitter that the exploit targeted Aave v1, the oldest protocol version, frozen since December 2020. 


According to Zeller, no user could deposit or increase borrow size on Aave v1, which made the issue “unlikely but not impossible.”

Aave’s governance token AAVE had no material reaction to the news. AAVE is trading at $77.88, up 0.7% on the day, according to data from CoinGecko.

On the Flipside

  • The full details about the exploit are still unavailable.

Why You Should Care

Aave is known to be resilient to exploits. Seeing one of the oldest DeFi protocols attacked and drained for millions of dollars is concerning. That’s why investors should always do their own research before deciding where to invest their funds.

Read more about the Euler hacker returning everything they had stolen:

Euler’s $200M Hacker Finally Returns All “Recoverable Funds”

Read more about Ethereum’s Shanghai upgrade:

What Is Ethereum’s Shanghai Upgrade? ETH Staking Withdrawals Explained

This article is for information purposes only and should not be considered trading or investment advice. Nothing herein shall be construed as financial, legal, or tax advice. Trading forex, cryptocurrencies, and CFDs pose a considerable risk of loss.

Arturas Skur

Arturas Skur is a cryptocurrency news reporter at DailyCoin who covers Web 3.0 domains, DeFi, and Ethereum Layer-2s. With over five years of experience in journalism and public relations, Arturas brings his critical thinking and analytical abilities to deliver insightful news stories. In his free time, he enjoys hiking, playing with his dog, and reading.