Float Protocol Suffers Flash Loan Attack, Losing About $28,000

Float Protocol was hit by a flash loan attack that caused losses of about $28,000, or 10.71 ETH. According to Foresight News, SlowMist said the attacker manipulated Uniswap V3 spot prices through slot0, which led to incorrect pricing of LP shares in the Hypervisor contract. The report said key functions lacked TWAP and oracle checks, as well as slippage protection. The attacker also used large trades in a V3 liquidity pool to distort currentTick() and getTotalAmounts() values, then repeatedly deposited and withdrew inflated share value to profit.