Aave loop module: 114.09 ETH drained from two Safe multisigs, and what you can do now

The information provided in this article is for informational purposes only and does not constitute financial advice. Cryptocurrency investments carry a high degree of risk. Always conduct your own research.Around 114.09 ETH flowed out of two Safe multisig wallets because the access control of a helper contract around Aave v3 could be bypassed. Aave's core pools and the Safe core were untouched; only wallets with an active loop module were affected. What was hit were not the lending markets of Aave but two individual wallets that had an add-on module switched on. According to the security firm SlowMist, around 114.09 ETH flowed out of two Safe multisig wallets because the access control of an external helper contract around Aave v3 could be bypassed. Anyone running a Safe of their own therefore has a clearly defined task: look at which modules are active there, and switch off everything that is not needed. A Safe multisig is a wallet that sits on the blockchain as a contract and only acts once a set number of signatures has come together. A module is an additional contract that this wallet allows to trigger transactions even without the full signing quorum. It was precisely that sh...