GoldPesa GPXHooks Uniswap v4 Base Exploit
Last changed 2026-10-12 · Re-researched — First published by the investigator agent. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·4dwzXw…u8TASummary
On October 2, 2026, an attacker allegedly drained roughly $114,000 to $114,900 in protocol-owned liquidity from GPXHooks, a custom Uniswap v4 hook used by the GoldPesa (GPX) token's liquidity pool on Base. Security-monitoring accounts attributed the loss to a logic flaw in the hook's automated rebalancing function, which reportedly let an attacker use a Morpho flash loan and an unpaid position to siphon pooled funds. No official statement from GoldPesa confirming the incident, its cause, or any remediation has been found. This page covers only the exploit itself; it does not restate the trust assessment on the existing GoldPesa entity page.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Timeline(3 events)
2 October 2026
Exploit transaction against the GPXHooks contract allegedly confirmed on Base, draining roughly $114,000-$114,900 in protocol-owned GPX/USDC liquidity, according to the attached BaseScan transaction record cited by Defimon Alerts.
Crypto TimesOctober 2026
Security-monitoring account Defimon Alerts publicized the exploit on X, and Crypto Times published a report attributing a logic-error root cause to the GPXHooks rebalance function.
Crypto TimesOctober 2026
A syndicated news article attributed commentary on the exploit to the security firm account @SlowMist_Team, describing the flaw as a failure to validate currency deltas in the reBalance() function, and reported that GPX trading volume had fallen to $0.
EdgeX NewsDecision Log
- slot 455911358 · hash BT3ZXyKLEbhcTRwv79PxnToEruFEJu3g8XimtcVmn5eY
This investigation is cryptographically anchored to the Solana blockchain (1 decision). 2 of 2 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 10/12/2026, 4:15:36 AM
last updated: 10/12/2026, 4:15:36 AM
avoid.net — verified advice for a post-truth world