Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Float Protocol Price Manipulation

·Historical incident record

Incident Overview

The attackers withdrew approximately 350 ETH (equivalent to $1.1 million) from Float Protocol’s Rari Capital pool. The reason is that Uniswap V3 FLOAT/USDC oracles lack liquidity, which allows attackers to manipulate the price in the pool and then deposit at a higher interest rate. The hackers returned about $250,000 for some reason.

Sources & References

Original incident referencehttps://twitter.com/FloatProtocol/status/1482184042850263042 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodFlash Loan Price Manipulation
    Reported loss$ 28,000
  2. Incident date
    Target

    CityDAO

    Attack methodAccount Compromise
    Reported loss29.67 ETH
  3. Incident date
    Target

    Frosties

    Attack methodRug Pull
    Reported loss$ 1,000,000
  4. Incident date
    Attack methodPermission Stolen
    Reported loss$ 34,000,000
  5. Incident date
    Attack methodRug Pull
    Reported loss$ 10,000,000