A flash loan is an unusual DeFi tool that lets someone borrow funds without any collateral, on one strict condition: the loan must be borrowed and repaid within the same single transaction. If it is not repaid by the end of that transaction, the whole thing is cancelled as if it never happened.
Aave's own documentation puts it bluntly: there is no real-world analogy to flash loans. That is not marketing language. Nothing in traditional finance works this way, because nothing in traditional finance can undo the past.
Why an uncollateralised loan is possible at all
Everywhere else in DeFi lending, you must lock up more value than you borrow. A smart contract cannot check your identity, cannot verify income, and cannot pursue you if you default — so it holds collateral instead. That is the whole basis of protocols like Aave.
Flash loans appear to break that rule completely. They do not.
The enforcement mechanism is simply different. Blockchain transactions are atomic: every step inside a transaction either completes, or none of them do. There is no partial state, no half-finished operation left behind.
So the contract lends you money and adds one final check at the end of the transaction: has the loan plus fee been returned? If yes, the transaction is written to the chain. If no, the entire transaction reverses — including the moment the money left the pool.
The lender is never at risk, because a failed flash loan never happened. Collateral is unnecessary when default is mathematically impossible.
What actually happens, step by step
All of this occurs inside one transaction, in a fraction of a second:
- A smart contract calls the lending pool and requests an amount
- The pool sends the funds
- The borrower's contract executes whatever logic it was written to perform
- The contract returns the principal plus the fee
- The pool verifies repayment
If step 5 fails, steps 1 through 4 are erased. The chain records nothing except that a transaction was attempted, and the borrower still pays the gas cost of the failed attempt.
On Aave V3 the flash loan fee is 0.05 percent of the amount borrowed, set at deployment and adjustable by governance vote. Older documentation cites 0.09 percent, which was the earlier figure — a useful reminder that these parameters change.
What they are legitimately used for
Arbitrage. If an asset trades at different prices on two decentralised exchanges, someone can borrow, buy on the cheaper venue, sell on the dearer one, repay the loan, and keep the difference — with no starting capital.
Collateral swapping. Someone holding a loan backed by one asset who wants to switch to another would normally have to repay the loan, unlock the collateral, sell it, buy the replacement, redeposit, and reopen the position. A flash loan does all of it in one atomic step, so the position is never left unmanaged.
Self-liquidation. A borrower approaching liquidation can use a flash loan to repay their own debt, reclaim their collateral, sell part of it, and settle the flash loan — avoiding the liquidation penalty that a third-party liquidator would have taken.
Debt refinancing. Moving a loan from one protocol to another to secure a better rate, without needing the capital to close the first position.
All four share a shape: they need capital briefly, and the outcome is known before the transaction is submitted.
Why this is not a consumer product
Aave's documentation states directly that flash loans are an advanced concept aimed at developers, and that using them requires a good understanding of the EVM, programming, and smart contracts.
That is worth taking literally. You cannot take a flash loan from a website or an app. A flash loan requires writing and deploying a smart contract that borrows, executes logic, and repays inside one function call. There is no interface for it because there cannot be one — a human cannot react inside a single transaction.
The economics are also harsher than the arbitrage examples suggest. Most obvious price gaps in 2026 are captured within seconds by MEV bots that monitor pending transactions and outbid competitors on gas. A complex arbitrage transaction can consume several hundred thousand units of gas, costing well over a hundred dollars on Ethereum mainnet — which means a trade must clear that cost before it earns anything. Practitioners describe failure rates of 30 to 50 percent while learning, and each failure still costs gas.
This page explains how the mechanism works. It is not a guide to using it, and the description above should make clear why casual attempts tend to lose money.
The exploit problem
Flash loans have been involved in a significant number of DeFi attacks, and it is worth being precise about why, because the common framing is wrong.
Flash loans are rarely the vulnerability. They are the amplifier.
Many DeFi exploits require an attacker to control a large amount of capital briefly — enough to move a price oracle, dominate a governance vote, or drain an imbalanced liquidity pool. Historically that limited such attacks to people who already had millions of dollars.
Flash loans removed that barrier. Now anyone who can identify a weakness can temporarily command enormous capital without owning any. The underlying flaw was always there; the flash loan just made it reachable.
The most common pattern involves price oracle manipulation. A protocol that reads prices from a single decentralised exchange pool can be fooled by an attacker who borrows heavily, trades to distort that pool's price, exploits a second protocol that trusts the distorted figure, and repays — all atomically.
Protocols have adapted. Time-weighted average prices, multiple oracle sources, and caps on how much a value can move within a single block all make this harder. The defence is better oracle design, not the removal of flash loans.
Common misconceptions
"Free money with no risk." The loan itself carries no default risk to the lender, but the borrower pays gas on every attempt including failures, competes against professional bots, and needs the logic to be correct on the first try.
"I can get a flash loan to pay a bill." No. The funds must return within the same transaction. Money that leaves the transaction cannot come back, so the loan cannot fail — meaning there is no way to actually spend it.
"Flash loans are a security flaw." They are a working feature that exposes flaws elsewhere. Removing them would not fix a manipulable oracle; it would only make the manipulation more expensive to attempt.
"I could learn this in a weekend." It requires Solidity, an understanding of transaction ordering and MEV, and real testing infrastructure. Practitioners describe months of work and consistent early losses.
What to take from this
The useful idea here generalises well beyond flash loans.
In traditional finance, trust is established through identity, credit history, and legal recourse. In DeFi, it is established through mechanism design — building systems where the undesirable outcome is impossible rather than merely punished.
Over-collateralised lending does this by holding more than it lends. Flash loans do it by making default reversible. Different tools, same principle: replace the need for trust with a structure that does not require it.
Understanding that is more valuable than any specific parameter on this page, and it applies to protocols that have not been built yet.
This entry explains the concept. It is firmly educational and not a guide to using flash loans. Figures reflect published documentation as of August 2026; fees and parameters are set by governance and change.