Security Incident · ETH Ecosystem
Spiral Price Manipulation: $26.80K Reported Loss
The attacker manipulated the Uniswap V4 pool spot price.
- Reported loss
- $ 26,800
- Attack category
- Price Manipulation
Incident Overview
SpiralHookV2.borrow() valued collateral using poolManager.getSlot0() without TWAP or price-change limits. The noSameBlockSwap guard (keyed by tx.origin) was bypassed via 6 different EOAs, allowing borrowing against inflated collateral in the same block as the pump, resulting in a loss of ~10.7 ETH.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.