Thanks for reporting this, @cy_c! I was able to reproduce the issue and have filed a bug with the team.
In the meantime, you may want to try a different hook type, such as preToolUse, and read tool_input.model when making decisions about allowing/denying the tool!