KipseliPropAMM exploit analysis
KipseliPropAMM's TWAP anchored its trailing sample at block-end, so the attacker moved the trailing anchor via a flash into the pool. DeFiHackLabs reconstructs the in-block TWAP-move drain.
- Reported loss
- 0.93 cbBTC, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-04-21: Pricing Decimals Mismatch on KipseliPropAMM”.
Analysis1 min read
KipseliPropAMM's proposed swap settled on a TWAP window that the attacker had already moved via a same-block flash swap. The TWAP window sampled two anchors per block, and the attacker manipulated the trailing anchor by trading into the pool at the end of the block.
DeFiHackLabs reconstructs the sequence against the live state; total loss is captured in the PoC.
What would have prevented it: a TWAP window that anchors only at the start of each block rather than at random or end-of-block.
Other exploits
- Unverified_a152 exploit analysis 27 Apr 2026
- SingularityDynaVault exploit analysis 25 Apr 2026
- GiddyVaultV3 exploit analysis 23 Apr 2026
- JuiceboxREVLoans exploit analysis 20 Apr 2026
- ThetanutsVaultShareRounding exploit analysis 20 Apr 2026
- AaveRebalancerCreditDelegation exploit analysis 19 Apr 2026
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
