According to CoinMeta, and as monitored by SlowMist, Float Protocol suffered a lightning loan attack, resulting in a loss of approximately $28,000 (10.71 ETH). The attacker manipulated the spot price of Uniswap V3 through lightning loans, causing pricing errors for the LP shares within the Hypervisor contract. Relevant key functions lacked TWAP or oracle verification, as well as slippage protection mechanisms. The attacker distorted the values of currentTick () and getTotalAmounts () by conducting large transactions within the V3 fund pool, and then repeatedly deposited and withdrew the inflated value of the shares for arbitrage purposes.