Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Float Protocol Flash Loan Price Manipulation: $28.00K Reported Loss

·Historical incident record

Incident Overview

An attacker used a flash loan to execute large swaps on a Uniswap V3 pool and manipulate the spot price (slot0). This caused Float Protocol’s Hypervisor contracts to misprice LP shares. Because critical functions lacked TWAP/oracle validation and slippage protection, the attacker repeatedly deposited and withdrew at inflated share values, extracting about $28,000 (10.71 ETH).

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2094373942291026287 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodPrice Manipulation
    Reported loss350 ETH
  2. Incident date
    Target

    Aquifer

    Attack methodSmart Contract Vulnerability
    Reported loss$ 2,500,000
  3. Incident date
    Attack methodSeed Phrase Leakage
    Reported loss$ 452,000
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 234,000
  5. Incident date
    Target

    Tectonic

    Attack methodPrice Manipulation
    Reported loss$ 120,400,000