Leaderboard
978All-time rank
B

BoostHook

May 12, 2026

$187K
Lost
$187K
Recovered
$0
Net loss
$187K
Unrecovered0% recovered

BoostHook was exploited via a flash loan attack that manipulated the ETH/PERP Uniswap v4 pool price. openLong(), then reversed the price move.

The protocol's hard-capped MAX_LIQS_PER_BLOCK limit prevented liquidation of all toxic positions, leaving four 8 ETH-debt positions open and causing significant bad debt.

Target
DeFi
Classification
Oracle Manipulation
Technique
Spot Price Manipulation
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. May 12, 2026
    Exploit executed — $187K drained via spot price manipulation
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents