Float Protocol Hit by Flash Loan Attack, Losing Approximately $28,000

According to SlowMist monitoring, Float Protocol suffered a flash loan attack, losing approximately $28,000 (10.71 ETH). The attacker manipulated the Uniswap V3 spot price (slot0) via a flash loan, causing incorrect pricing of LP shares in the Hypervisor contract, with key functions lacking TWAP/oracle validation and slippage protection mechanisms. The attacker distorted the currentTick() and getTotalAmounts() values through large trades in the V3 pool, then repeatedly deposited and withdrew the inflated share value to arbitrage.