SlowMist: Aave v3 Loop Safe Module Exploited for 114 ETH

The exploit targeted an integration layer rather than Aave v3's core lending logic, which matters because it shows how access-control gaps in peripheral modules can expose user funds even when the base protocol holds. The affected parties are Safe multisig users relying on Loop's automation, not Aave depositors broadly. Whether other adapter-style modules share the same forged-authentication weakness — and how quickly such integrations are reviewed or paused — is the open question.