Singularity Finance Hack

What happened

On April 27, 2026, a Singularity Finance vault on Base was exploited for about $413,000 after misconfigured oracle pricing undervalued non-USDC reserves.

Technical root cause

A misconfigured Uniswap V3 oracle queried an unsupported fee tier and accepted a zero price for non-USDC reserves without a sanity check. The resulting understated totalAssets value enabled ERC-4626 share-mint inflation.

How it happened

The attacker flash-loaned 100,000 USDC, deposited it into dynBaseUSDCv3 while its oracle valued non-USDC reserves at zero, minted nearly all vault shares at the distorted ratio, and redeemed the shares for the valuable underlying reserves.

Protocol details

Classification Oracle Manipulation

Protocol Type Yield

Implementation language Solidity

Protocol links Website @Singularity_Fi

Market Context at Time of Hack

Token Price at Hack $0.00565114

Market Cap at Hack $967K

Reported loss / token market cap 42.69%

Token Categories

Asset Management AI & Big Data DeFi Staking Ethereum Ecosystem Yield Farming DeFi Index BNB Chain Ecosystem

Protocol Links

GitHub Telegram

Security review history

• Paladin Security View report
• Hacken View report

Evidence

• analysis DeFiLlama defillama.com
• analysis SlowMist Hacked: Singularity Finance hacked.slowmist.io
• analysis Singularity dynBaseUSDCv3 Exploit crypto.training

Understand the attack patterns

Compare incidents →

Oracle Manipulation & Price Manipulation