What Is a Flash Loan Attack on Ethereum?

20 October 2026

A flash loan attack is a type of exploit in which an attacker borrows a large amount of cryptocurrency without collateral, executes a series of transactions that manipulate market prices or exploit contract vulnerabilities, and repays the loan - all within a single Ethereum block. If the attack fails, the entire transaction reverts, meaning the attacker loses only the gas fees spent.

How flash loans work normally

Flash loans are a DeFi innovation that allows anyone to borrow any amount of tokens instantly, provided the loan is repaid within the same transaction block. Unlike traditional loans, no collateral is required because the borrowing and repayment happen atomically: if the borrower cannot repay, the entire transaction is reversed as if it never occurred.

These loans rely on smart contracts and are made possible by the Ethereum Virtual Machine's ability to execute complex sequences of operations in one block. Lenders earn fees from successful flash loans, which are typically small (often 0.09% of the borrowed amount). Platforms like Aave, dYdX, and Uniswap pioneered this feature for legitimate uses such as arbitrage, collateral swaps, and self-liquidation.

Anatomy of a Flash Loan Attack

A flash loan attack typically follows this sequence within a single transaction:

1. Borrow a large sum via a flash loan from a lending protocol.
2. Manipulate a price oracle by making large trades on a decentralized exchange (DEX) to artificially change the price of a token.
3. Execute a profitable trade using the distorted price - for example, buying underpriced tokens elsewhere or draining a vulnerable pool.
4. Repay the flash loan plus fees.
5. Keep the profit as the transaction succeeds.

Because the loan is returned in the same block, the attacker never risks their own capital beyond transaction fees.

Common Vulnerabilities Exploited

Flash loan attacks prey on specific weaknesses in DeFi protocols:

• Manipulable price oracles. If a protocol uses a DEX's spot price as its oracle without aggregating multiple sources or applying time-weighted averages, an attacker can alter that price with a large trade, then exploit the discrepancy.
• Insufficient liquidity checks. Some protocols allow users to borrow or trade amounts that exceed available reserves, relying on mathematical formulas that assume normal market conditions.
• Reentrancy bugs. A vulnerable contract may call an external contract without updating its internal state first, allowing the attacker to recursively drain funds.
• Slippage tolerance. If a swap function accepts any output amount, an attacker can force a trade at a manipulated rate.

Historical impact and scale

Flash loan attacks have caused losses ranging from tens of thousands to hundreds of millions of dollars. Notable examples include the 2020 bZx incident, the 2021 PancakeBunny exploit, and the 2022 Wormhole bridge attack. Attackers often use sophisticated scripts that execute dozens of interactions across multiple protocols in a single block.

These exploits are possible because DeFi composability allows anyone to call any public function on any smart contract. An attacker does not need permission or prior approval to attempt the attack; they only need to write a smart contract that executes the sequence and pay the gas.

Defenses against flash loan attacks

Protocols use several strategies to reduce risk:

• Decentralized oracles. Using price feeds from Chainlink or similar services that aggregate data across multiple sources and include time-weighted averages makes manipulation far harder.
• Price manipulation checks. Some protocols compare trade prices against external oracles and revert transactions if the deviation exceeds a threshold.
• Circuit breakers. If unusual activity is detected (e.g., a sudden large price change or abnormal trading volume), the protocol pauses operations.
• Time-locks and multi-block validation. Requiring trades to settle over multiple blocks prevents single-block manipulation.
• Proper reentrancy guards. Using OpenZeppelin's ReentrancyGuard or similar patterns prevents recursive calls.

Risks for ordinary users

As a regular Ethereum user, you are not directly at risk from flash loan attacks unless you interact with a vulnerable DeFi protocol. However, these attacks can affect you indirectly:

• Loss of funds. If a protocol you use is exploited, your deposits may be drained.
• Price volatility. Manipulated prices on DEXs can cause temporary but sharp price swings that trigger liquidations or bad trades.
• Loss of trust. Repeated exploits erode confidence in DeFi, potentially reducing liquidity and increasing fees.

To stay safer, use established protocols with audited smart contracts, check whether they use decentralized oracles, and avoid platforms that have suffered previous flash loan attacks without clear fixes.

Key Takeaway

Flash loan attacks are a fundamental risk of Ethereum's programmable finance layer. They exploit the same atomic transaction property that makes flash loans useful for legitimate arbitrage. The defense lies in robust protocol design - not in user behavior - so your best protection is choosing well-built, battle-tested DeFi applications that treat price manipulation as a primary threat.

Back to ethereum