Hack history / 2026 / Hack or exploit
KolanHook
Hack or exploit on Oct 15, 2026 · KolanHook settles its escrowed ETH buy-windows at the same Uniswap v4 pool's instantaneous spot price with no TWAP or bound and accept() is ungated once a window has expired, so the attacker flash-borrows 6.7 WETH from Balancer, swaps it to move the KLN spot, then calls accept() on two expired windo
ATTACK TX CONFIRMED ON CHAINONE SOURCE · 1 SOURCE
Lost
$19K
dollars at the time
Returned
none listed
as the sources state it
Rank
#2,141
among thefts by dollars lost
What happened
No description from DefiLlama or SlowMist; see the sources below.
Details
- Date
- Oct 15, 2026
- Kind
- Hack or exploit
- Method
- KolanHook settles its escrowed ETH buy-windows at the same Uniswap v4 pool's instantaneous spot price with no TWAP or bound and accept() is ungated once a window has expired, so the attacker flash-borrows 6.7 WETH from Balancer, swaps it to move the KLN spot, then calls accept() on two expired windo
- How in
- Other
- Target
- not stated
- Chains
- Ethereum
Reported by
- DeFiHackLabs exploit reproduction only
Cite this page
SwanBluechip, "KolanHook hack, Oct 15, 2026: $19K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht9cdaf4fad9/ (data as of 2026-10-31).