Float Protocol hit by $28K flash loan attack through Uniswap V3 manipulation

Float Protocol has lost about $28,000, or 10.71 ETH, after an attacker used a flash loan to manipulate a Uniswap V3 spot price and exploit how its Hypervisor contracts calculated liquidity provider share values. Summary Float Protocol lost about $28,000, or 10.71 ETH, after a flash loan attack manipulated a Uniswap V3 spot price. SlowMist said the manipulation caused affected Hypervisor contracts to calculate inflated LP share values. The attacker used large swaps to distort currentTick() and getTotalAmounts(), then repeatedly deposited and withdrew against the incorrect values. SlowMist said critical functions lacked TWAP or oracle verification and slippage protection. SlowMist said on Aug. 31 that the attacker distorted the Uniswap V3 slot0 spot price, causing affected Hypervisor contracts to calculate incorrect LP share values. The blockchain security firm traced the exploit to functions that lacked TWAP or oracle verification and slippage protection. 🚨SlowMist TI Alert🚨💰 @FloatProtocol Loss: ~$28,000 (10.71 ETH)🔍 Root Cause: Uniswap V3 spot price (`slot0`) manipulation via flash loans enabled incorrect LP share pricing in Hypervisor contracts. Critical functions lacked TWAP/ora...