Add ArrakisGUNI exploit PoC - Uniswap V3 spot-price manipulation of v…
A Proof of Concept (PoC) for an exploit on ArrakisGUNI has been added, showing Uniswap V3 spot-price manipulation of vault mint/burn functions.
$282.9M lost this week $2.0B lost in 30 days $95.2B lost this year
A Proof of Concept (PoC) for an exploit on ArrakisGUNI has been added, showing Uniswap V3 spot-price manipulation of vault mint/burn functions.
A Proof of Concept (PoC) for an exploit on FloatProtocol has been added, demonstrating Uniswap V3 spot price manipulation of Hypervisor LP shares.
Float Protocol experienced a loss of approximately $28,000 (10.71 ETH) due to Uniswap V3 spot price manipulation via flash loans. This led to incorrect LP share pricing in Hypervisor contracts, as critical functions lacked TWAP/oracle validation and slippage protection.
Atomic Green was exploited due to a signature replay vulnerability on Arbitrum, resulting in a loss of approximately $29,984. The attacker replayed manager signatures across Uniswap V3 LP positions, triggering unauthorized LP burns.
Singularity Finance vaults were exploited due to an oracle misconfiguration where an unsupported fee tier caused the oracle to value non-USDC reserves at zero. An attacker used a flash loan to mint vault shares at this incorrect ratio and redeemed them for actual assets, draining approximately $413,000. The misconfiguration had been present for about three months.
Aperture LM was exploited for approximately $3.67 million across Ethereum, Base, Arbitrum, and BSC due to an arbitrary-call vulnerability in its contracts. Attackers abused existing user token and Uniswap V3 LP NFT approvals to drain funds. The team paused affected features and urged users to revoke approvals.