Univ3CollateralToken exploit analysis
Univ3CollateralToken priced its collateral from a Uniswap V3 spot pool with no TWAP guard, and the attacker borrowed against a flash-inflated collateral price. DeFiHackLabs reconstructs the on-chain drain.
- Reported loss
- 57K USD, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-03-24: Logic Error on Univ3CollateralToken”.
Analysis1 min read
Univ3CollateralToken's collateral price was read from a Uniswap V3 pool's spot, with no TWAP guard. A flash-loaned attack moved the spot and borrowed against the inflated collateral.
DeFiHackLabs reconstructs the sequence against the live state; total loss is captured in the PoC.
What would have prevented it: a TWAP-protected oracle with a minimum update window.
Other exploits
- WhalebitOracleManipulation exploit analysis 31 Mar 2026
- VTSwapHook exploit analysis 28 Mar 2026
- EST Token exploit analysis 27 Mar 2026
- XocolatlLiquidator exploit analysis 24 Mar 2026
- BCE exploit analysis 23 Mar 2026
- ATMBlindBox exploit analysis 19 Mar 2026
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
