Hack history / 2026 / Hack or exploit
BoostHook
Hack or exploit on May 12, 2026 · Spot Price Manipulation
ONE SOURCE · 1 SOURCE
Lost
$187K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,516
among thefts by dollars lost
What happened
BoostHook was exploited via a flash loan attack that manipulated the ETH/PERP Uniswap v4 pool price. An attacker used a 120 WETH Morpho flash loan to temporarily push the pool price upward, opened nine leveraged long positions at the inflated price through BoostHook.openLong(), then reversed the price move. The protocol's hard-capped MAX_LIQS_PER_BLOCK limit prevented liquidation of all toxic positions, leaving four 8 ETH-debt positions open and causing significant bad debt.
Details
- Date
- May 12, 2026
- Kind
- Hack or exploit
- Method
- Spot Price Manipulation
- How in
- Price, oracle and governance
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Rhea Lend 2026 · Hack or exploit · $18.4M
Blend Pools V2 2026 · Hack or exploit · $10.2M
Bonzo Lend 2026 · Hack or exploit · $9.1M
Moonwell Lending 2026 · Hack or exploit · $8.7M
Cyrus Finance 2026 · Hack or exploit · $5M
Blend Pools V2 2026 · Hack or exploit · $10.2M
Bonzo Lend 2026 · Hack or exploit · $9.1M
Moonwell Lending 2026 · Hack or exploit · $8.7M
Cyrus Finance 2026 · Hack or exploit · $5M
Cite this page
SwanBluechip, "BoostHook hack, May 12, 2026: $187K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htdbd5a13d0f/ (data as of 2026-10-31).