Flash Loans: How DeFi's Most Powerful Tool Works

Imagine a bank that will lend you $10 million with no credit check, no collateral, no approval process, available to anyone with an Ethereum address — as long as you return every dollar within the next 15 seconds. This isn't a hypothetical: it's what flash loans are. They're one of DeFi's genuinely novel financial primitives with no counterpart in traditional finance, and understanding how they work reveals something fundamental about what programmable money on a blockchain makes possible.

The Atomic Transaction Trick

Flash loans are only possible because of a property called atomicity: every operation in an Ethereum transaction either all succeeds or all fails together. There's no in-between state. If any step in a sequence of operations reverts, every preceding step reverts too — as if the entire transaction never happened.

Flash loans exploit this guarantee. Here's the sequence: (1) You borrow 1,000,000 USDC from Aave's lending pool. (2) You execute whatever DeFi operations you want with that 1,000,000 USDC. (3) Before the transaction ends, Aave's smart contract checks that you've returned 1,000,900 USDC (your borrow plus the 0.09% fee). If step 3 passes, the transaction completes: the borrow happened, your operations ran, the repayment was made. If step 3 fails — if you haven't repaid in full — the entire transaction reverts. From the blockchain's perspective, nothing happened. No tokens moved. Aave's pool never lent anything.

The lender takes literally zero risk. Either the loan is repaid in the same transaction, or the loan never occurred. This is why Aave can offer uncollateralised loans to anyone — there's nothing to collateralise against because the risk has been mathematically eliminated by the atomicity guarantee. It's as if the loan is simultaneously contingent on its own repayment.

Legitimate Use #1: Arbitrage

The most common legitimate use of flash loans is arbitrage — profiting from price discrepancies between DeFi protocols. When ETH is priced at $3,000 on Uniswap and $3,015 on Curve, there's a $15 profit opportunity on every ETH bought on Uniswap and sold on Curve. But to capture it, you need capital to buy the ETH in the first place. Flash loans remove this requirement.

An arbitrage bot's flash loan sequence: (1) Flash borrow 3,000,000 USDC from Aave. (2) Buy 1,000 ETH on Uniswap at $3,000 each ($3,000,000 total). (3) Sell 1,000 ETH on Curve at $3,015 each ($3,015,000 total). (4) Repay 3,002,700 USDC to Aave (principal + 0.09% fee). (5) Keep $12,300 profit. No personal capital required. If the arbitrage opportunity disappears before the transaction completes (another bot captured it first, causing the prices to equalise), step 3 would return less than $3,002,700 — the repayment check at step 4 would fail, the entire transaction would revert, and the bot would lose only the gas cost of the failed transaction (a few dollars).

Flash loan arbitrage performs a valuable market function: it keeps prices aligned across DEX protocols. Every time an arbitrageur closes a price gap, both pools become more accurately priced. Users on each protocol get better execution. The arbitrageur earns a fair profit for providing this service. This is a genuinely positive-sum dynamic.

Legitimate Use #2: Collateral Swaps

Imagine you have a $500,000 USDC loan on Aave, collateralised by ETH. You want to switch your collateral from ETH to WBTC — maybe because you're more bullish on BTC going forward, or because WBTC has a higher LTV ratio that lets you borrow more. Without flash loans, this requires multiple steps: partially repay the loan, withdraw some ETH, sell for WBTC, deposit WBTC, borrow more USDC, repeat — a cumbersome, expensive process where your loan is dangerously undercollateralised at each intermediate step.

With a flash loan, the entire swap happens atomically in one transaction: (1) Flash borrow 500,000 USDC. (2) Repay your Aave loan in full (collateral ETH is released). (3) Sell the ETH for WBTC on Uniswap. (4) Deposit WBTC as new collateral on Aave. (5) Borrow 500,000 USDC from Aave again. (6) Repay the flash loan plus fee. At no point during this sequence is your position undercollateralised from anyone's perspective except within the atomic execution window — and since the entire sequence either completes or reverts, the intermediate unsafe states never persist on-chain.

Legitimate Use #3: Self-Liquidation

If your DeFi loan is approaching the liquidation threshold, you have two options: add more collateral, or repay the loan. But repaying requires having the borrowed asset available — which you may have already deployed elsewhere. If a third-party liquidator closes your position, they receive a liquidation bonus (typically 5–10% of collateral) as their fee. On a $500,000 position, that's $25,000–50,000 lost to the liquidator that you could have kept.

Flash loans enable self-liquidation: (1) Flash borrow enough USDC to repay your loan in full. (2) Repay the loan on Aave, releasing your collateral (e.g., ETH). (3) Sell enough ETH to repay the flash loan plus fee. (4) Keep the remaining ETH. You emerge from the process owning ETH instead of the borrowed position — with no liquidation penalty subtracted. Self-liquidation is strictly better than third-party liquidation when you have sufficient collateral to cover the flash loan repayment, which is almost always true before you reach the liquidation threshold.

Flash Loan Attacks: When the Same Tool Steals Millions

The same atomic transaction that makes legitimate flash loans possible also makes them the weapon of choice for sophisticated DeFi exploits. The attack pattern typically involves using flash-borrowed capital to temporarily manipulate a price or governance mechanism, extract value from a vulnerable protocol, and repay the loan — all in one transaction.

The Beanstalk exploit (April 2022, $182 million): an attacker used a flash loan to borrow enough BEAN governance tokens to gain temporary supermajority voting power. In the same transaction as the borrow, they submitted and immediately executed a malicious governance proposal that transferred the entire Beanstalk treasury to their wallet, then repaid the flash loan. The entire attack — borrow, governance coup, treasury drain, repayment — executed atomically in one block. Beanstalk's governance architecture assumed that votes couldn't pass and execute in a single transaction. Flash loans proved that assumption wrong.

The Euler Finance attack (March 2023, $197 million): exploited a vulnerability in Euler's donation mechanism combined with flash loans to create artificially large debt positions that the protocol's liquidity calculations treated as collateral. The attack required multiple interleaved flash loans. Unusually, the attacker returned all funds after negotiations — but the exploit demonstrated that even well-audited protocols can fall to flash loan-amplified attacks when economic logic rather than code bugs is the vulnerability.

Flash loan attacks specifically target: (1) protocols that use spot prices from AMMs as oracles (which can be manipulated within a single transaction), (2) governance systems where proposals can execute in the same block they're voted on, and (3) protocols with accounting logic that can be manipulated by large temporary balance changes. Well-designed protocols use Chainlink price feeds or Uniswap v3 TWAPs (time-weighted averages that require manipulation across multiple blocks), require multi-block voting periods, and implement flash-loan-resistant accounting.

Fees and Accessing Flash Loans

Aave's flash loan fee is 0.09% (9 basis points) of the borrowed amount. Balancer offers 0% fee flash loans for some use cases. dYdX historically offered free flash loans. On $1 million borrowed, Aave charges $900 — trivial relative to any profitable strategy, which is why the fee doesn't significantly constrain legitimate use.

To access flash loans as a developer, you deploy a contract implementing Aave's IFlashLoanSimpleReceiver interface. The contract receives the borrowed tokens, executes your logic in the executeOperation() callback, approves the repayment to the Aave pool, and the pool contract verifies repayment. Detailed documentation and example implementations are in Aave's GitHub repository.

For non-developers, platforms like DeFi Saver and Instadapp provide user-friendly interfaces for the most common flash loan use cases — collateral swaps, debt refinancing, self-liquidation — without requiring you to write or deploy smart contracts. These platforms handle the flash loan mechanics transparently; you specify the operation you want and they execute it using flash loans under the hood.

The Bigger Picture

Flash loans demonstrate something fundamental about programmable money. Financial instruments that are impossible in traditional systems — uncollateralised loans that guarantee their own repayment through atomic execution — become natural when money is implemented as programmable software on a shared execution environment. The same properties enable both the beneficial arbitrage that keeps DEX prices aligned and the attacks that have drained hundreds of millions from vulnerable protocols. Flash loans don't have an "intent" — they're a tool, and the architecture of the protocols they interact with determines whether that interaction is constructive or destructive. Building MEV-resistant, oracle-manipulation-resistant DeFi protocols is the engineering challenge that flash loans have permanently placed on the agenda.