Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Spiral Price Manipulation: $26.80K Reported Loss

·Historical incident record

Incident Overview

The attacker manipulated the Uniswap V4 pool spot price. SpiralHookV2.borrow() valued collateral using poolManager.getSlot0() without TWAP or price-change limits. The noSameBlockSwap guard (keyed by tx.origin) was bypassed via 6 different EOAs, allowing borrowing against inflated collateral in the same block as the pump, resulting in a loss of ~10.7 ETH.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2099410818244968850 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 7,730,000
  2. Incident date
    Target

    Nimiq

    Attack methodSmart Contract Vulnerability
    Reported loss$ 50,463
  3. Incident date
    Target

    Startale

    Attack methodSmart Contract Vulnerability
    Reported loss$ 2,876
  4. Incident date
    Attack methodSupply Chain Attack
    Reported loss$ 118,000
  5. Incident date
    Target

    Chainflip

    Attack methodProtocol logic vulnerability
    Reported loss$ 736,442.17