SlowMist
SlowMist|Aug 31, 2026 10:43
🚨SlowMist TI Alert🚨 💰 @FloatProtocol Loss: ~$28,000 (10.71 ETH) 🔍 Root Cause: Uniswap V3 spot price (`slot0`) manipulation via flash loans enabled incorrect LP share pricing in Hypervisor contracts. Critical functions lacked TWAP/oracle validation and slippage protection. 📌 Attacker: `0xaea29218262dc6b0904ca077f6527c49dfd426d9` 📌 Attack Contract: `0xb46655eb5b77de277063a75586d1883e951b6c54` 📌 Vulnerable Contracts: - `0x85cbed523459b7f6f81c11e710df969703a8a70c` - `0xc86b1e7fa86834cac1468937cdd53ba3ccbc1153` 📌 Underlying Pool: `0xe8c2036068fc3b0161ee1def0e8d01df4eac0ac` Attackers manipulated `currentTick()`/`getTotalAmounts()` by swapping large amounts on the V3 pool to distort `slot0`, then repeatedly deposited and withdrew with inflated share values. Powered by http://SlowMist.AI Tx: https://etherscan.io/tx/0x3d7549db65344da2a41067e17791b17fac16ec6b8e5132e82e243f6541de5cff(SlowMist)
+4
Mentioned
Share To

Timeline

HotFlash

APP

X

Telegram

Facebook

Reddit

CopyLink

Hot Reads