What happened
Quick Summary
A user's Aave Protocol assets were stolen using phishing attack, which resulted in a loss of 1,201,576 $USD.
Details of the Exploit
A user approved trading for four different tokens of Aave Protocol, such as $aArbWETH, $aFanWETH, $aArbWBTC and $aFanUSDC, possible via phishing attack. The attacker took the assets and then swapped them into 1,201,576 $USDC using four smart contract with unverified source code, and than all selfdestructed. The funds were transferred through Celer Bridge.
Block Data Reference
Attacker addresses:
Malicious transaction:
Approval transaction:
Protocol details
Classification
Borrowing and Lending
Protocol Type
Exploit/Phishing
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
