Morpho Blue security incidents

Arrakis V1 hacked

The Arrakis V1 / G-UNI ENS-WETH liquidity-manager vault was drained via Uniswap V3 spot-price manipulation on August 23, 2026. An attacker used a flash loan to distort the pool's price, mint vault shares, and then redeem them for a profit of approximately 2.94 WETH.