bit.fanBit.FanWeb3 News · Betting Reviews · Market Insights
‹ BackNewsflash loan attack

flash loan attack

Float Protoco
2026-08-31 10:42:06

Float Protocol hit by flash loan attack, losing about $28,000, SlowMist says

Float Protocol suffered a flash loan attack that caused losses of about $28,000, or 10.71 ETH, according to monitoring data cited by ChainCatcher from blockchain security firm SlowMist. The attacker manipulated the Uniswap V3 spot price, specifically slot0, which led to incorrect LP share pricing in the protocol’s Hypervisor contract. SlowMist said the issue was tied to key functions that lacked TWAP or oracle validation as well as slippage protection. The attacker then carried out large trades in a V3 pool to distort the values returned by currentTick() and getTotalAmounts(). After pushing share valuations higher, the attacker repeatedly deposited and withdrew to extract profit. The report focuses on the attack path and the pricing weakness involved in the exploit.

860
Float Protocol hit by flash loan attack, losing about $28,000, SlowMist says
Chainalysis
2026-08-04 00:18:56

Chainalysis says LpdFi exploit netted attacker about $700,000

Chainalysis said Hexagate detected an attack on the LpdFi protocol yesterday, with losses estimated at about $700,000. According to the monitoring details provided, the attacker used a flash loan of roughly $44 million and manipulated the price of the LPD token on a decentralized exchange, pushing it up by 71x. The inflated price was then used to fake a deposit worth around $140 million inside the protocol, even though the tokens involved were valued at only about $2 million. One second later, just after crossing the protocol’s daily interest settlement boundary, the attacker collected a full day of interest on that exaggerated position. The move then triggered the liquidation of the protocol’s entire liquidity pool and released the stolen funds. After repaying all loans, the attacker walked away with an estimated profit of about $700,000. The funds were then moved through Relay and TornadoCash.

1930
Chainalysis says LpdFi exploit netted attacker about $700,000
BNB Chain
2026-08-03 06:50:33

Defimon says LpdFi on BNB Chain lost about $690,000 in flash-loan attack

LpdFi on BNB Chain was exploited in a flash-loan attack that drained roughly $690,000, according to monitoring from Defimon Alerts. The tracker said the flaw came from LpdFi’s Lpd.price() function, which pulled the LPD price directly from spot reserves in the PancakeSwap LPD/USDC pair without using a time-weighted average price or other manipulation safeguards. By borrowing USDC through a flash loan, the attacker was able to skew the pair’s reserves and make the order’s uAmount represent “interest” worth far more than the value of the LPD collateral behind it. Defimon said the attacker then used claimInterest(), which called removeLp(), to pay out that inflated interest by burning the protocol’s own PancakeSwap LP position, extracting USDC and forwarding 99% of it to the caller. The entire LpdFi LP stack, about 1.68 million LP, was removed, and around 693,000 USDC was paid to the attacker in a single transaction.

1860
Defimon says LpdFi on BNB Chain lost about $690,000 in flash-loan attack