An attacker exploited an access-control flaw in the third-party FlashLoopAdapter to steal about 114.09 Ether, worth $305,000, from two Safe multisig wallets. Aave founder Stani Kulechov and SlowMist said Aave V3 itself suffered no losses.