Skip to content
Est. MMXXVIVol. VI · № 273RSS
Blockchain Breaches

An archive of cryptocurrency security incidents — hacks, exploits, bridge failures and rug pulls, documented with on-chain evidence.

Dossier № 018Flash Loan Attack

Warp Finance LP Collateral Manipulation

Warp Finance lost $7.8M valuing Uniswap LP-token collateral from manipulable spot reserves; a flash loan inflated LP value and let the attacker over-borrow.

Date
Chain(s)
Status
Partially Recovered

On December 17, 2020, Warp Finance lost approximately $7.8 million because it valued Uniswap LP-token collateral from the pool's manipulable spot reserves. A flash loan inflated the LP valuation; the attacker over-borrowed against it. Roughly $5.5M was recovered (returned/frozen with white-hat and community help).

What happened

Warp accepted Uniswap LP tokens as collateral, pricing them from the pair's current reserves. A flash loan skewed the reserves, inflating the LP-token value Warp computed; the attacker deposited LP collateral and borrowed far more stablecoins than its true worth. Much was recovered post-incident.

Why it matters

Warp Finance is the LP-token-collateral pricing variant of the 2020 flash-loan oracle wave — specifically the lesson that LP-token valuation must use reserve math that is resistant to single-transaction manipulation (fair-LP-pricing / sqrt(k) formulas), never raw spot reserves. It predates and prefigures Lodestar and every later LP-collateral incident. December 2020 already contained the full lesson; the catalogue's later LP-collateral entries are the ecosystem failing to read it.

Sources & on-chain evidence

  1. [01]halborn.comhttps://www.halborn.com/blog/post/explained-the-warp-finance-hack-december-2020
  2. [02]rekt.newshttps://rekt.news/warp-finance-rekt

Related filings