Sharwa.Finance
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·WzxSXU…9hCfSummary
Sharwa.Finance is an on-chain portfolio margin trading protocol deployed on Arbitrum, enabling leveraged spot and options trading with cross-margin collateral. The protocol suffered a $147,000 exploit in October 2025 via a flash loan price-oracle manipulation attack, a vulnerability class that had been explicitly identified and reported by the Pashov Audit Group over one year prior to the incident. The protocol was flagged by on-chain security researchers including ZachXBT-adjacent monitoring networks, and a second oracle manipulation incident resulting in approximately $32,850 in losses was recorded in May 2026.
Connected Entities
5 entities · 60 linked investigations- Sharwa.Finance→mentioned with→Arbitrum(80%)
- Sharwa.Finance→mentioned with→Chainlink(60%)
- Sharwa.Finance→mentioned with→ZachXBT(65%)
- Sharwa.Finance→mentioned with→Uniswap(80%)
- Arbitrum→mentioned with→Uniswap(60%)
Timeline(8 events)
17 June 2024
Pashov Audit Group publishes security review of SharwaFinance/MarginTrading, identifying four critical-severity findings including C-01 Uniswap Spot Price Manipulation, explicitly warning that reliance on Uniswap V3 spot prices enables flash loan exploitation.
2 October 2025
Sharwa.Finance deploys a new version of the FacadeTradeRouter contract (18 days before the exploit), reportedly without re-applying the oracle fix recommended in the Pashov audit.
20 October 2025
Sharwa.Finance exploited on Arbitrum via flash loan price oracle manipulation. Attackers use a large USDC flash loan from Morpho to manipulate a Uniswap V3 pool and withdraw excess value through the FacadeTradeRouter contract. Total losses approximately $147,000.
23 October 2025
FailSafe publishes exploit analysis identifying two separate attackers, attributing approximately $61,000 and $85,000 in profits respectively to an absence of insolvency checks in the MarginTrading swap function.
27 October 2025
Sharwa.Finance team posts attack post-mortem on X, commits to 100% reimbursement of affected users, and implements Reduce-Only mode blocking new positions.
27 October 2025
Additional exploit transactions documented on Arbitrum network; $40,000 of stolen funds recovered.
27 October 2025
Verichains publishes vulnerability analysis of the Sharwa Finance exploit, confirming the oracle manipulation vector and noting the prior Pashov audit finding.
May 2026
Sharwa.Finance suffers a second security incident attributed to oracle price manipulation on Arbitrum, resulting in approximately $32,850 in losses according to DefiLlama protocol data.
Decision Log
- hash: 7UmjMUmuLsPCm57CKKBxfv2FgL5EzFxKfkqLPjT77iFm
This investigation is cryptographically anchored to the Solana blockchain (1 event). 8 of 9 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:15 AM
last updated: 8/29/2026, 9:21:00 AM
4 viewsavoid.net — verified advice for a post-truth world