loophole attack