Exploit Response
A flash-loan-assisted liquidation path was identified on the legacy ETH deployment. The protocol logic was hardened before redeploy.
l20p is a Uniswap V4 hook lending AMM. The idle ETH sitting in the pool — capital that would otherwise just back trades — is lent out against locked l20p collateral. Buy l20p on the curve, lock it, draw from the pool's reserves. Repay anytime. Liquidations are permissionless, with a delayed two-step guard after the exploit fix.
A flash-loan-assisted liquidation path was identified on the legacy ETH deployment. The protocol logic was hardened before redeploy.
2 blocks.Replay testing reproduces the exploit behavior on legacy code and shows the patched flow emits only a liquidation request on first call, then enforces cooldown before liquidation can execute.