Security· ★★· bearish·

GoldPesa's GPXHooks on Base Drained for $114K in Liquidity Rebalance Exploit

  • —Attacker borrowed 175,000 USDC from Morpho and opened a WETH/USDC position with about 115,000 USDC outstanding
  • —The hook burned its own position for 148,900 USDC but received only 33,900 USDC, with the rest covering the attacker's debt
  • —Funds were converted to USDT and bridged through Solana to BNB Chain
  • —The transaction was confirmed on Base on October 2, 2026, at 13:05 UTC
Why it matters: The case highlights logic flaws in Uniswap v4 hooks and liquidity rebalancing, where a protocol's own funds can be used to settle an attacker's obligations.
Source: The Crypto Times