DeTracker Security Feed

$282.9M lost this week $2.0B lost in 30 days $95.2B lost this year

🚨SlowMist TI Alert🚨 💸 @spir8l_com Loss: ~10.7 ETH 🔍 Root Cause: SpiralHookV2.borrow() uses Uniswap V4 pool spot price (poolManager.getSlot0()) to value collateral without TWAP or price-change limits. The protocol's noSameBlockSwap guard is keyed by tx.origin, so the

The Spiral protocol experienced a loss of approximately 10.7 ETH due to a vulnerability in its SpiralHookV2 contract. The contract incorrectly valued collateral using Uniswap V4 pool spot prices without TWAP or price-change limits.

Source: SlowMist Team (opens in a new tab)

#Spiral #UniswapV4

🚨Community alert: Blockaid detected an ongoing exploit on @symbiosis_fi on BSC. Signed BridgeV2 receive minted ~2^62 raw syBTC (8 decimals; face value ~46.1B) to a fresh EOA; same beneficiary dumped ~4.39 WBTC on Ethereum Uni V4. ~$336k realized WBTC proceeds so far.

Blockaid detected an ongoing exploit on Symbiosis Finance on BSC where the BridgeV2 contract minted a large amount of syBTC, which was then used to dump approximately 4.39 WBTC on Ethereum's Uniswap V4. The attacker has realized around $336,000 in WBTC proceeds so far.

Source: Blockaid (opens in a new tab)

#Symbiosis #SymbiosisFinance #UniswapV4