Worked example · 2026-10

GoldPesa — a hook's reBalance() trusted currency deltas it never settled through the shared PositionManager — GoldPesa (GPX) / Base — 2026-10-02

Loss

~$114.9K.

OAK Techniques observed

OAK-T9.016 (Contract Accounting / State-Invariant Flaw — primary, single-sourced. Per syndicated reporting of SlowMist's alert, GPXHooks.reBalance() did not validate currency deltas against the shared PositionManager, allowing positions to be minted without the matching settlement. See techniques/T9.016-contract-accounting-state-invariant-flaw.md). No transaction-level analysis was found; mapping is provisional.

Re-mapped 2026-10-11

primary Technique moved from T9.004 to T9.016-contract-accounting-state-invariant-flaw.

Attribution

pseudonymous.

Key teaching point

In a hook architecture the hook is part of the accounting, and an unsettled delta is free money. Every path that changes a position must close its deltas against the pool manager before returning.