BBX Logo Beta

--

SlowMist TI Alert @FloatProtocol Loss: ~$28,000 (10.71 ETH) Root Cause: Uniswap V3 spot price (`slot0`) manipulation via flash loans enabled incorrect LP share pricing in Hypervisor contracts. Critical functions lacked TWAP/oracle validation and slippage protection. Attacker: `0xaea29218262dc6b0904ca077f6527c49dfd426d9` Attack Contract: `0xb46655eb5b77de277063a75586d1883e951b6c54` Vulnerable Contracts: - `0x85cbed523459b7f6f81c11e710df969703a8a70c` - `0xc86b1e7fa86834cac1468937cdd53ba3ccbc1153` Underlying Pool: `0xe8c2036068fc3b0161ee1def0e8d01df4eac0ac` Attackers manipulated `currentTick()`/`getTotalAmounts()` by swapping large amounts on the V3 pool to distort `slot0`, then repeatedly deposited and withdrew with inflated share values. Powered by http://SlowMist.AI Tx: https://(etherscan.io)/tx/0x3d7549db65344da2a41067e17791b17fac16ec6b8e5132e82e243f6541de5cff

Loading...