VTSwapHook exploit analysis
VTSwapHook's Uniswap V4 hook priced the swap from the underlying pool's spot, which the attacker moved via a flash loan. DeFiHackLabs reconstructs the in-hook pricing drain.
- Reported loss
- 4,507,034.03 vATH + 2,007,935.14 ATH, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-03-28: Pricing Error In Uniswapv4 Hook on VTSwapHook”.
Analysis1 min read
VTSwapHook's pricing was set against a Uniswap V4 hook's getPoolPrice that returned the spot price of the underlying pool. The attacker flash-loaned the underlying pool's tokens, dropped the spot, and the hook's pricing followed.
DeFiHackLabs reconstructs the sequence against the live state; total loss is captured in the PoC.
What would have prevented it: a hook pricing that reads from a TWAP-protected oracle rather than the spot pool price.
Other exploits
- SquidMulticallAllowanceDrain exploit analysis 7 Apr 2026
- PerpPair exploit analysis 5 Apr 2026
- WhalebitOracleManipulation exploit analysis 31 Mar 2026
- EST Token exploit analysis 27 Mar 2026
- Univ3CollateralToken exploit analysis 24 Mar 2026
- XocolatlLiquidator exploit analysis 24 Mar 2026
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
