Loading...
According to SlowMist Monitoring, Float Protocol suffered a lightning loan attack, resulting in a loss of approximately $28000 (10.71 ETH). The attacker manipulated the spot price of Uniswap V3 through lightning loans, resulting in incorrect pricing of LP shares in the Hypervisor contract. The related key functions lacked TWAP or oracle verification and slippage protection mechanisms. The attacker distorts the values of current Tick() and getTotal Amounts () by conducting large transactions in the V3 fund pool, and then repeatedly deposits and extracts the inflated share value for arbitrage.