# Uniswap v4 hook rebalancing flaw drains about $115,000 from GoldPesa on Base, and MALT loses treasury DAI on Polygon

In both attacks, a protocol-funded rebalance ran inside a user's swap without separating the protocol's capital from the caller's, and attackers used flash loans to capture the difference.

- Published: 2026-10-05T05:31:33.542Z
- Canonical: https://polylog.news/crypto/2026-10-05/uniswap-v4-hook-rebalancing-flaw-drains-about-115-000-from-g
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [DeFiHackLabs (GoldPesa PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/5431dbc5980e11442976ac760839d28052b49682), [DeFiHackLabs (GoldPesa PoC, earlier commit)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/569e8f7f57440d7dddcc018a589dd2e9749ce499), [DeFiHackLabs (MALT PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/f143d3b16ed2fc3434660ddb269092c9317c5180), [DeFiHackLabs (MALT PoC, second commit)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/304ab87400499eba6980918f05d799ae929bdd34), [The Crypto Times](https://www.cryptotimes.io/2026/10/03/goldpesas-gpxhooks-allegedly-drained-for-114k-in-base-exploit/), [GN Crypto](https://www.gncrypto.news/news/malt-loses-72000-in-swap-exploit-tapping-treasury-dai/)

GoldPesa (Base, about $115,000). On October 2, an attacker took about 115,000 USDC from the Uniswap v4 pool manager through GoldPesa's GPXHooks contract, The Crypto Times reported. Researchers at DeFiHackLabs published a proof-of-concept (a…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-10-05/uniswap-v4-hook-rebalancing-flaw-drains-about-115-000-from-g (subscription information: https://polylog.news/pricing).