Float Protocol Suffers Flash Loan Attack, Losing Approximately $28,000

SlowMist reported that Float Protocol was hit by a flash loan attack, resulting in a loss of about $28,000 (10.71 ETH). The attacker manipulated the Uniswap V3 spot price (slot0) via flash loans, causing incorrect pricing of LP shares in the Hypervisor contract due to the absence of TWAP/oracle verification and slippage protection. By distorting currentTick() and getTotalAmounts() values through large trades, the attacker repeatedly deposited and withdrew inflated share values to extract profit.