🚨SlowMist TI Alert🚨 💸 @spir8l_com Loss: ~10.7 ETH 🔍 Root Cause: SpiralHookV2.borrow() uses Uniswap V4 pool spot price (poolManager.getSlot0()) to value collateral without TWAP or price-change limits. The protocol's noSameBlockSwap guard is keyed by tx.origin, so the
The Spiral protocol experienced a loss of approximately 10.7 ETH due to a vulnerability in its SpiralHookV2 contract. The contract incorrectly valued collateral using Uniswap V4 pool spot prices without TWAP or price-change limits.