The lending project has WETH-USDC LP market. As you can see, price calculation for WETH-USDC LP market relies on UniswapV3Pool.
Hacker was able to manipulate price, at first, price was 5826926145978180.
But after manipulation price was 8131590584988874.
He deposited some LP tokens in the pool, then deposited USDC and borrowed LP tokens. When borrowing, the price was low. Then, he manipulated price, because LP token price was much higher, he was able to borrow all tokens. He gained about $130k.
Leave a Reply