What Is a Flash Loan Attack? How These Exploits Work

A flash loan attack is a DeFi exploit that uses an uncollateralized loan — borrowed and repaid within a single blockchain transaction — to temporarily access enormous amounts of capital, which the attacker then uses to manipulate a price, drain a vulnerable contract, or otherwise exploit a protocol, before repaying the loan in that same transaction. Because the loan must be repaid by the transaction's end or the entire transaction reverts as if it never happened, the "loan" itself carries no real credit risk to the lender — it's the manipulation enabled by that temporary capital that causes the damage.

Why flash loans exist for legitimate purposes

Flash loans were originally designed as a genuinely useful DeFi primitive: they let users execute capital-efficient operations like arbitrage, collateral swaps, or debt refinancing without needing to already own the capital involved, since the loan and its repayment happen atomically within one transaction. If the transaction can't repay the loan plus a small fee, the entire transaction simply fails and nothing happens — no debt is left outstanding, no default risk exists. This atomicity is what makes flash loans safe for the lending protocol, but it's also what makes them a powerful tool in the hands of an attacker who's found a genuine vulnerability elsewhere.

The typical anatomy of a flash loan attack

1. Borrow a large amount of an asset via a flash loan from a lending protocol — often millions of dollars worth, since there's no collateral requirement.
2. Manipulate a price or state somewhere in the DeFi ecosystem using that borrowed capital — commonly by making a large trade in a thin liquidity pool to temporarily distort its spot price, if a vulnerable protocol relies on that pool's spot price as an oracle instead of a more manipulation-resistant price feed.
3. Exploit a protocol relying on that manipulated price or state — for example, borrowing far more than should be allowed against collateral that a vulnerable protocol now (incorrectly, momentarily) believes is worth much more than it actually is, or triggering favorable liquidations based on the distorted price.
4. Repay the flash loan plus its fee, all within the same transaction, keeping the difference — the exploited funds — as profit.
5. The transaction confirms, and because everything happened atomically, the attacker walks away with the exploited funds while the flash loan itself leaves no bad debt behind.

Why oracle design matters so much here

The single most common enabling factor in flash loan attacks is a protocol relying on a manipulable price source — typically the spot price of a single, thin liquidity pool — rather than a decentralized, time-weighted, or multi-source oracle that's much harder and more expensive to distort within a single transaction. Protocols using well-established oracle networks with multiple independent data sources and time-weighting are far more resistant to this specific attack pattern than ones pulling a live spot price directly from one pool.

Flash loan attacks vs other DeFi exploit types

Exploit type	Core mechanism	Typical defense
Flash loan price manipulation	Borrowed capital distorts a spot price oracle	Decentralized, time-weighted, multi-source oracles
Reentrancy	Exploiting a contract's call ordering to drain funds repeatedly before state updates	Standard secure coding patterns, checked in audits
Governance attack	Accumulating voting power to pass a malicious proposal	Time-weighted voting snapshots, timelocks
Bridge exploit	Compromising the mechanism that verifies cross-chain messages	Robust, audited bridge validation logic

Notable patterns, not specific incidents

Flash loan attacks became one of the defining exploit categories of DeFi's earlier years, targeting protocols across lending, yield aggregation, and algorithmic stablecoin designs — almost always by combining a legitimate flash loan with a separate, pre-existing vulnerability in the targeted protocol's price logic or economic assumptions. The flash loan itself is rarely the "bug" — it's the delivery mechanism for exploiting a weakness that already existed.

What this means for evaluating a protocol's safety

When assessing whether a protocol is vulnerable to this class of attack, the most relevant question is what price source it relies on for critical functions like collateral valuation and liquidations, and whether that source could be meaningfully distorted by a large, single-transaction trade. This is one of the more technical but important checks within the broader framework covered in our guide on evaluating DeFi protocol risk.

Bottom line

Flash loan attacks combine a legitimate, self-repaying loan mechanism with a separate vulnerability — most commonly a manipulable price oracle — to extract value from a protocol within a single atomic transaction. The flash loan itself isn't the flaw; it's a powerful tool that exposes flaws elsewhere, which is why oracle design and resistance to single-transaction price manipulation remain some of the most important security properties for any DeFi protocol handling meaningful value.