
GoldPesa's GPXHooks on Base Drained for $114K in Liquidity Rebalance Exploit
- —Attacker borrowed 175,000 USDC from Morpho and opened a WETH/USDC position with about 115,000 USDC outstanding
- —The hook burned its own position for 148,900 USDC but received only 33,900 USDC, with the rest covering the attacker's debt
- —Funds were converted to USDT and bridged through Solana to BNB Chain
- —The transaction was confirmed on Base on October 2, 2026, at 13:05 UTC
Why it matters: The case highlights logic flaws in Uniswap v4 hooks and liquidity rebalancing, where a protocol's own funds can be used to settle an attacker's obligations.
Source: The Crypto Times