# Aave · Drain Watch

4 incidents, 1 live. JSON: https://drains.watch/t/aave.json · RSS: https://drains.watch/t/aave/feed.xml

- [Whale drained of $25.6M in aWBTC, DAI, WBTC and ETH; same wallet lost $24M to phishing in 2023](https://drains.watch/i/whale-wallet-25m-drain-aug-2026) (live, Critical, Still active, since Aug 12, 2026)
- [User loses $1.08M in Aave LBTC (aEthLBTC) to a malicious permit signature](https://drains.watch/i/permit-phishing-1-08m-aethlbtc-jan-2026) (closed, Critical, Contained, since Jan 3, 2026)
- [Whale's 1-of-1 Safe multisig drained of $27M+ after key compromise, ETH laundered via Tornado Cash](https://drains.watch/i/whale-safe-1of1-key-compromise-nov-2025) (closed, Critical, Still active, since Nov 4, 2025)
- [Phishing campaign used the AI site builder Lovable to fake Aave and push wallet connections](https://drains.watch/i/lovable-ai-built-aave-phishing-sites-jun-2025) (closed, Medium, Partly contained, since Jun 17, 2025)