Ekubo exploit analysis

Ekubo's concentrated-liquidity pool paid out TWAP fees against a pool whose accumulator was updated in the same block as a swap that the attacker made. The attacker read the pre-swap accumulator and exited the pool at the post-swap fee stage, capturing the difference as fee without having provided the liquidity during the swap's price move.

DeFiHackLabs reconstructs the sequence against the live Starknet state. The drain is captured in the README's transaction references.

What would have prevented it: a fee accrual that requires sustained liquidity across the swap's price move, or any path that blocks same-block swaps-and-fee-claim.