PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Flash Loan Attack: How They Work and How to Defend Against Them

hackenproof.com | blog | #web3 | #vulnerability-research | #smart-contracts | #defi | #governance | #oracle-manipulation | #flash-loans | #euler-finance
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Argues 'flash loan attacks' are misnamed: the loan is just atomic capital, while the flaw sits in the protocol — missing health checks, manipulable oracles, no governance timelock — as Euler shows.
Published
Collected

Related coverage

blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
blog · hackenproof.com
1inch Bug Bounty Report: Aqua Edition, H1 2026
This report highlights common smart contract and DeFi logic vulnerabilities discovered through crowdsourced security testing.
blog · hackenproof.com
Lending Protocol: Vectors of Attack and Preventing Potential Issues
A review of attack vectors on DeFi lending protocols — oracle manipulation, flash loan exploits and liquidity attacks — with the $197M Euler Finance hack as a case study.
blog · hackenproof.com
DeFi Lending Protocols: Attack Vectors and How to Secure Them
How DeFi lending protocols work, the attack vectors behind recent exploits like Kelp-Aave and Tectonic, and the controls that keep lending markets secure.
blog · hackenproof.com
Maiar DEX went offline. Bug in Elrond smart contract a reason
Analysis of the Maiar DEX exploit: a callback flaw in Elrond's new VM function let an attacker drain over 1.6M EGLD, forcing an emergency shutdown and a 95% price crash in half an hour.
blog · hackenproof.com
Exclusive hot summer offer for Hacken DeFi clients
A 2021 Hacken promotional post: DeFi projects that had passed a Hacken smart-contract audit could run bug bounty programs free of subscription fees on HackenProof, paying only researcher rewards plus a 20% commission, for programs active by August 31, 2021.
Back