The team behind Prism, a Uniswap v4 token that distributes fees to all holders, has relaunched on a new smart contract after an exploit diverted nearly 40 percent of the protocol’s fees. The original token crashed more than 90 percent in a single day following the attack.
The exploit involved a bad actor creating approximately 2,500 “phantom” fee positions within the Prism contract, allowing them to claim a significant portion of the fees generated by the protocol. This left legitimate holders with substantially reduced returns and triggered a sharp sell-off in the original token.
The pseudonymous development team responded by redeploying the contract with additional security measures designed to prevent similar attacks. The new contract includes enhanced validation of fee positions and monitoring mechanisms that can detect unusual activity patterns.
Uniswap v4 introduced the ability for pools to implement custom fee logic through hooks, enabling innovative token designs like Prism that redistribute fees to token holders. However, the increased flexibility also introduces new attack surfaces that developers must carefully consider.
The Prism incident highlights the risks associated with novel DeFi mechanisms, where the complexity of smart contract interactions can create unexpected vulnerabilities. Users who held the original Prism token have been instructed on how to migrate their holdings to the new contract, though the value of their positions was significantly affected by the exploit and subsequent price decline.
This article was adapted from The Defiant. Read the original here.
