🚨SlowMist TI Alert🚨 💸 @spir8l_com Loss: ~10.7 ETH 🔍 Root Cause: SpiralHookV2.borrow() uses Uniswap V4 pool spot price (poolManager.getSlot0()) to value collateral without TWAP or price-change limits. The protocol's noSameBlockSwap guard is keyed by tx.origin, so the attacker used 6 different EOAs to bypass it and borrow against inflated collateral within the same block as the pump. 📌 Attacker (EOA): 0x859E69A29244A10800A34eE66919426C02aFa2f0 📌 Attack Contract: 0x0c23c8bc3b7c565f3f9f4ac691a4dc4275086f86 📌 Vulnerable Contracts: 0x1725577dC9B1ee2D95dB49c2193226471594aacc Tx: https://etherscan.io/tx/0x84f2f1d061b187d3c2096281b8a52805185604468e4f005580a9150d36379925 https://etherscan.io/tx/0x0599c7769da0df6e75cc9441372b30937ceb742378485d26605fdb27d2e4642e https://etherscan.io/tx/0x3172b1d4baf8d29cb2ecd74e3eb89c34d786290ce9f607a3c4edc136281d6fb2 https://etherscan.io/tx/0x09524ce13bf47d103fabf69a8e260fe19b0c6699a4b01858ee56ea1ebed19cfc https://etherscan.io/tx/0x129f6c6894832b2d1ccbfd392fd5004da720ed35c5ef2e9ef1687ceea6b8f22b https://etherscan.io/tx/0xc197577734d690d0335d7e315dfaf99ff153055a1854ed5cf5033d4dbf8653d5 https://etherscan.io/tx/0x0dd9a193c77e9fab48157a02ed123f08ead7fcf31cd2f6fa7be69e28e2890db1 Powered by http://SlowMist.AI(SlowMist)