An attacker exploited a custom contract called FlashLoopAdapter on Ethereum on October 1, 2026, draining approximately $305,000 from two Safe wallets.