VTSwapHook Hack

Reported loss Not disclosed
Arbitrum
Swap Logic Flaw

What happened

On 28 March 2026, a custom VTSwapHook on Arbitrum was exploited and the connected PoolManager lost ATH and vATH liquidity. The technical mechanism below is a third-party on-chain reconstruction, not a confirmed project disclosure.

Technical root cause

A third-party on-chain reconstruction attributes the loss to a midpoint approximation of a logarithmic curve and fee-inclusive reserve accounting; this proposed root cause is medium-confidence rather than a confirmed contract fact.

How it happened

According to that reconstruction, repeated swaps through Uniswap v4 unlock callbacks alternated directions and compounded the pricing error. The analyst reports that internal reserves were credited with gross, rather than net, input.

Protocol details

Classification Protocol Logic
Protocol Type DeFi Protocol
Implementation language Solidity

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.