An attacker manipulated the EFI/DAI Uniswap V2 pair's spot price mid-transaction using flash-loan-funded buying pressure, then exploited ElevateFi's staking vault which relied on raw pair reserves without any time-weighted or external oracle guard. By inflating EFI's spot price during staking, the attacker received disproportionate staking positions: creating $2.5M recorded staking principal for only 713.5 EFI of actual principal, repeated 100 times.