Shared-Accounting Hooks Become an Exploit Class
Protocols that run self-funded rebalancing logic inside other users' swaps will keep losing capital to attackers who exploit shared settlement accounting, because audits test the hook alone rather than within a hostile session.
weakening · confidence 26 · -14 7d · Emerging (watchlist) · tracking since October 5, 2026 · updated October 12, 2026
Score history
Daily conviction score, 0 to 100. Higher means the thesis is more strongly corroborated.
Now 26 · -2 since Oct 11 · ranged 26 to 28
Showing the last few days. Unlock full score history.
Why the conviction moved
- Oct 5Strengthened +5
Attackers took about $115,000 from GoldPesa's Uniswap v4 hook on Base and drained treasury DAI from MALT on Polygon. In both cases a rebalance funded by the protocol ran inside a user's swap without separating the protocol's capital from the caller's, and flash loans captured the difference. Two separate protocols losing money the same way shows this is a repeating exploit class, not a one-off bug.
Source trail
Supporting · October 5, 2026
Uniswap v4 hook rebalancing flaw drains about $115,000 from GoldPesa on Base, and MALT loses treasury DAI on Polygon
Attackers took about $115,000 from GoldPesa's Uniswap v4 hook on Base and drained treasury DAI from MALT on Polygon. In both cases a rebalance funded by the protocol ran inside a user's swap without separating the protocol's capital from the caller's, and flash loans captured the difference. Two separate protocols losing money the same way shows this is a repeating exploit class, not a one-off bug.
DeFiHackLabs (GoldPesa PoC)
Unlock full source trail, score history, and daily updates.
Unlock TrendsAffected regions & assets
Townsquare
Argue the thesis in Townsquare.