Uniswap V3 security incidents
-
Add ArrakisGUNI exploit PoC - Uniswap V3 spot-price manipulation of v…
A Proof of Concept (PoC) for an exploit on ArrakisGUNI has been added, showing Uniswap V3 spot-price manipulation of vault mint/burn functions.
-
Add FloatProtocol exploit PoC - Uniswap V3 spot price manipulation of…
A Proof of Concept (PoC) for an exploit on FloatProtocol has been added, demonstrating Uniswap V3 spot price manipulation of Hypervisor LP shares.
-
Float Protocol experienced a loss of approximately $28,000 (10.71 ETH) due to Uniswap V3 spot price manipulation via flash loans
Float Protocol experienced a loss of approximately $28,000 (10.71 ETH) due to Uniswap V3 spot price manipulation via flash loans. This led to incorrect LP share pricing in Hypervisor contracts, as critical functions lacked TWAP/oracle validation and slippage protection.
-
Atomic Green — Signature Replay
Atomic Green was exploited due to a signature replay vulnerability on Arbitrum, resulting in a loss of approximately $29,984. The attacker replayed manager signatures across Uniswap V3 LP positions, triggering unauthorized LP burns.
-
Singularity Finance hacked
Singularity Finance vaults were exploited due to an oracle misconfiguration where an unsupported fee tier caused the oracle to value non-USDC reserves at zero. An attacker used a flash loan to mint vault shares at this incorrect ratio and redeemed them for actual assets, draining approximately $413,000. The misconfiguration had been present for about three months.
-
Aperture LM — Token Approval Abuse
Aperture LM was exploited for approximately $3.67 million across Ethereum, Base, Arbitrum, and BSC due to an arbitrary-call vulnerability in its contracts. Attackers abused existing user token and Uniswap V3 LP NFT approvals to drain funds. The team paused affected features and urged users to revoke approvals.