I’ve been asked about this several times, so I’ll finally write it down.
In many attacks, attackers use flash loans to obtain huge amounts of capital and manipulate oracles that rely on the spot price of a single pool.
Flash loans themselves aren’t a vulnerability; they’re only used in these attacks to amplify the amount of capital. The real issue usually lies in the price source or contract logic of the protocol being attacked.
The lending protocol behind $AAVE , Aave, supports flash loans.
What do you think? Join the discussion in the comments.
In many attacks, attackers use flash loans to obtain huge amounts of capital and manipulate oracles that rely on the spot price of a single pool.
Flash loans themselves aren’t a vulnerability; they’re only used in these attacks to amplify the amount of capital. The real issue usually lies in the price source or contract logic of the protocol being attacked.
The lending protocol behind $AAVE , Aave, supports flash loans.
What do you think? Join the discussion in the comments.