Incident case file

Singularity Finance — Invalid Uniswap V3 Fee Tier Oracle Manipulation

Incident date April 27, 2026

0 views

Funds movingBaseOracle manipulationCluster: SINGULARITY-BASE-2026-04

Estimated loss

$413K

Victims identified

Victim group joining is coming soon.

Investigation

75%

Facts and investigation

Attacker: TODO

Funds moved to: TODO

Victim contract: dynBaseUSDCv3 vault (0x67b9...4dcd). Exploit transaction: 0x00b949...8d3732

Timeline: On April 27, 2026, an attacker exploited the dynBaseUSDCv3 vault on Base. The vault was configured with an invalid Uniswap V3 fee tier value of 42, while only 500, 3000, and 10000 are valid fee tiers. The getPrice() function returned 0 for the non-existent pool corresponding to fee tier 42. The attacker flash-loaned approximately 100,000 USDC, deposited into the vault, received nearly 100% of the share supply due to the zero price, and redeemed the shares for underlying tokens worth $413,000. Funds are currently being moved.

Sources and coverage

Victim testimonies

No testimonies yet.

+ Add my testimony → (coming soon)