In traditional finance, borrowing a billion dollars requires a billion dollars of collateral, a credit check, and days of processing. In DeFi, you can borrow a billion dollars with zero collateral, no identity check, and no waiting — as long as you pay it back a few seconds later, within the same blockchain transaction.

This is the flash loan. It is one of DeFi’s most innovative features. It is also one of its most dangerous attack vectors.

BLUF: A flash loan is a borrowing mechanism unique to blockchains: you can borrow any amount with no collateral, but the loan must be repaid within the same transaction. If repayment fails, the entire transaction reverts as if it never happened. Attackers use flash loans to temporarily access massive capital, manipulate prices or exploit protocol logic, profit from the distortion, repay the loan, and keep the difference — all in a single transaction with zero upfront capital and zero personal risk.

What Is a Flash Loan?

A flash loan is a type of uncollateralized loan unique to smart contract platforms. The mechanism is elegant in its simplicity:

  1. A borrower requests a large amount of cryptocurrency from a lending pool (like Aave or dYdX)
  2. The smart contract sends the funds to the borrower’s address
  3. The borrower uses the funds for whatever they want — trades, swaps, deposits, exploits
  4. By the end of the same transaction, the borrower must return the principal plus a small fee (typically 0.09%)
  5. If the principal and fee are not returned, the entire transaction reverts — every action is undone as if nothing ever happened

The key insight: because everything happens in a single transaction, the lender faces no risk. Either the money comes back (with fee), or the transaction doesn’t execute at all. There is no scenario where the lender loses money.

This is why flash loans require no collateral. The atomicity of the transaction — all-or-nothing execution — is the collateral.

Why Flash Loans Exist

Flash loans were created for legitimate purposes:

  • Arbitrage: Borrow capital to exploit price differences between DEXes, repay the loan, and keep the profit
  • Collateral swapping: Replace the collateral backing your loan with a different asset in a single atomic operation
  • Self-liquidation: Pay off your own underwater position to avoid liquidation penalties
  • Debt restructuring: Move a loan from one protocol to another for better terms

The problem: the same mechanism that enables legitimate arbitrage also enables devastating attacks. A tool that lets anyone access billions of dollars of capital — even temporarily — is inherently dangerous in a system full of exploitable protocols.

How Flash Loan Attacks Work

A flash loan attack is not a single technique — it is a category of attacks that use flash loans as the capital source. The borrowed funds enable exploitation at a scale that would otherwise require the attacker to already be wealthy.

The General Pattern

  1. Borrow massive capital. The attacker takes a flash loan — tens or hundreds of millions of dollars — from a lending protocol
  2. Manipulate a target protocol. Using the borrowed capital, the attacker exploits a vulnerability: distorting prices on a DEX, triggering artificial liquidations, exploiting a logic flaw in a smart contract, or manipulating governance votes
  3. Extract profit. The manipulation creates an opportunity — an underpriced asset, a favorable liquidation, a governance decision that unlocks treasury funds
  4. Repay the loan. The attacker returns the borrowed principal plus the flash loan fee, keeping the extracted profit
  5. Walk away clean. The entire attack happened in one transaction. No funds of the attacker’s own were at risk. The transaction is already confirmed on-chain — irreversible

The attacker profits from the gap between the manipulated state and the real state. Once the transaction completes, the market returns to normal pricing, but the attacker’s profit is already secured.

Real-World Example: The bZx Attacks (2020)

In February 2020, the bZx protocol was attacked twice in the same week using flash loans, draining nearly $1 million total.

Attack 1: The attacker took a 10,000 ETH flash loan from dYdX. They used part of it to manipulate the price of sUSD (a synthetic dollar) on a low-liquidity Uniswap pool — buying aggressively to inflate the price. Then they used the artificially inflated sUSD as collateral on bZx to borrow more ETH than the collateral was actually worth. Repay the flash loan, keep the difference.

Attack 2: Days later, a different attacker exploited bZx again — this time using a flash loan to manipulate the price of WBTC (wrapped Bitcoin) on Uniswap, then borrowing against the inflated value on bZx.

Both attacks followed the same pattern: borrow capital → manipulate a thin market → exploit a protocol that trusts that market’s price → repay loan → keep profit. Total attacker capital required: zero.

Real-World Example: Cream Finance (2021)

In October 2021, Cream Finance lost $130 million in a flash loan attack. The attacker borrowed massive amounts via flash loans, then exploited a vulnerability in Cream’s price oracle — which used a manipulated on-chain price to value a token far above its real worth. The attacker used the overvalued token as collateral, borrowed real assets against it, and repaid the flash loan.

The root cause: Cream’s oracle trusted a spot price from a low-liquidity pool that could be easily distorted with flash loan capital.

Why Flash Loan Attacks Are So Dangerous

Flash loan attacks are uniquely threatening for three reasons:

Zero capital requirement. Traditional exploits require the attacker to already hold significant cryptocurrency. Flash loans democratize exploitation — anyone with the technical skill can rent billions of dollars for a few seconds.

Zero personal risk. Because the flash loan reverts if the attack fails, the attacker has no downside. They either succeed and profit, or fail and lose nothing except gas fees (a few dollars).

Speed and irreversibility. The entire attack executes and finalizes in a single block — typically 12 seconds on Ethereum. By the time anyone notices, the transaction is already confirmed. There is no window to intervene.

The Four Most Common Attack Vectors

1. Price Oracle Manipulation

The most common flash loan attack. The attacker borrows capital, uses it to shift prices on a low-liquidity DEX pool, then exploits a protocol that reads prices from that pool. This was covered in detail in Oracle Manipulation Attacks in DeFi.

2. Governance Attacks

Some protocols use on-chain token voting for governance decisions. An attacker can flash-loan a massive amount of governance tokens, use the voting power to pass a malicious proposal (like draining the treasury), execute the proposal, and repay the loan — all in a single transaction. Protocols that allow same-block voting and execution are vulnerable.

3. Reentrancy Exploits

While reentrancy is a separate vulnerability, flash loans make it far more dangerous. An attacker can borrow enough capital to trigger a reentrancy condition that would otherwise require enormous personal holdings. The flash loan amplifies the exploit’s impact.

4. Statistical Exploits

Some protocols calculate interest rates, rewards, or fees based on utilization metrics within a single block. An attacker can use a flash loan to temporarily distort these metrics — depositing or withdrawing massive amounts to manipulate the calculation — then profit from the favorable rate before the loan is repaid.

How to Identify Protocols at Risk

You don’t need to audit smart contract code to assess flash loan risk. Several indicators are publicly available:

  • Check oracle sources: Does the protocol use a single DEX pool for price data? That’s the #1 flash loan risk. Look for protocols using Chainlink, TWAP (time-weighted average price), or multi-source oracles instead
  • Check pool liquidity: If the protocol reads prices from a pool with low liquidity (relative to the protocol’s total value locked), that pool is flash-loan-manipulable. The smaller the pool, the cheaper the manipulation
  • Check governance timing: If the protocol allows instant token voting and same-block execution, it is vulnerable to flash loan governance attacks. Reputable protocols enforce timelocks (hours or days between vote and execution)
  • Review audit reports: Look specifically for oracle, reentrancy, and flash-loan-related findings in audit reports from firms like Trail of Bits, OpenZeppelin, or CertiK
  • Check TVL distribution: If a protocol’s TVL is concentrated in a single pool or asset, a flash loan targeting that specific pool can destabilize the entire protocol

The Ongoing Arms Race

Flash loans themselves are not the problem — they are a neutral tool. The problem is the number of DeFi protocols with exploitable logic that flash loans can weaponize. As long as protocols trust manipulable price feeds, allow same-block governance execution, or have logic flaws that scale with available capital, flash loans will remain the attacker’s favorite tool.

Defenses have improved: TWAP oracles smooth out flash-loan price spikes, reentrancy guards are now standard, and timelocks prevent instant governance attacks. But new protocols continue to launch with naive designs, and attackers continue to find creative ways to use borrowed billions.

The most important rule for DeFi users: understand what price data your protocol trusts, and how much capital it would take to distort that data. If the answer is “a flash loan,” your funds may be at risk.

For more on related attack vectors, read about oracle manipulation, MEV extraction, and how to identify red flags in DeFi protocols.

On-chain analysis helps you understand risk, not eliminate it. Always do your own research before interacting with any DeFi protocol.