Oracle Attack

Crypto Securi

2026-10-08 23:56:21

Crypto security losses hit $730 million in September as attackers shift to infrastructure

A September 2026 security report cited by Lingzhi Technology said crypto-related security incidents led to roughly $730 million in outflows during the month, with more than 95% tied to two cases: a Bitget hot-wallet backend manipulation attack and a Liquid Network validator software exploit. The report said the month stood out not only for the scale of losses, but for where attackers focused their efforts. Instead of targeting smart contracts alone, they hit exchange backend systems, validator software, governance processes, oracle pricing, cross-chain bridges and liquidity pools. The Bitget incident on Sept. 25 accounted for about $387.5 million after attackers allegedly used a zero-day flaw in a third-party security product to obtain high-privilege internal credentials, forge withdrawal instructions and bypass risk controls. Liquid Network lost about $319 million on Sept. 6 after an attacker exploited a rangeproof cache collision bug in Elements to mint roughly 4,000 L-BTC without backing and redeem real BTC through SideSwap. About 85% of the stolen funds in that case, or around $272 million, were later returned, leaving roughly $47 million outstanding. The report also listed attacks involving Neutron, Duelbits, Nostra and Payy Network, along with phishing and rug-pull cases affecting Trezor users, DYORSWAP participants and meme-coin traders. Its conclusion was direct: infrastructure itself is becoming the primary attack surface.

461

PeckShield

2026-09-18 00:49:16

PeckShield says Nostra hit by oracle attack, with about $3.5 million borrowed out

DeFi protocol Nostra was hit by an oracle attack, according to monitoring shared by PeckShield on Sept. 18. The security firm said a manipulated NSTR oracle price let a single account use NSTR as collateral in Nostra’s Starknet money market and borrow roughly $3.5 million worth of assets. The borrowed assets included ETH, STRK, USDC, USDT, WBTC and DAI. PeckShield also said the attacker later bridged about $1.92 million of the stolen funds to Ethereum. That amount included 234.57 ETH and 1.3 million DAI. The update was cited by BlockBeats in a brief market report.

490

BeatXswap

2026-09-11 05:12:50

BeatXswap contract hit by oracle manipulation attack, losing about $63,700

Defimon Alerts said a BeatXswap-related contract on BNB Chain was exploited in an oracle manipulation attack on Sept. 9, with losses estimated at about $63,700. The affected contract, LiquidityVestingConvert, reportedly pulled live pricing directly from a PancakeSwap V3 pool and did not include protections such as time-weighted pricing. According to the alert, the attacker used a flash loan to push down the pool price and then called the deposit function, allowing the contract to inject roughly 3.07 million of the attacker’s own BTX into a liquidity position at a distorted valuation. The attacker then reversed the trade and made about 63,700 USDT in profit. Defimon Alerts added that BTX in two attributed pools was drained in the process.

1000

tokenized sto

2026-07-24 09:05:17

Tokenized Google Stock Exploit Inflated Collateral 78x, Leaving $403K Bad Debt on Edel Finance

Edel Finance halted its lending protocol after an attacker manipulated the wrapper of tokenized Google stock (wGOOGLx), inflating its value 78x and borrowing real assets, leaving ~$403K bad debt. No user funds were lost.

770

Bonzo Finance

2026-07-17 00:47:33

Bonzo Finance says users hit by oracle attack will be fully reimbursed

Bonzo Finance Labs said users affected by the July 11 oracle attack on Bonzo Lend will receive full reimbursement. The compensation will be calculated based on each user’s position status before the incident took place, according to the company’s statement. Bonzo Finance also said the payout will be backed by a recovery mechanism committed by the Hedera Foundation. The statement addresses the impact of the attack on Bonzo Lend and sets out how affected users will be compensated. No additional details on the reimbursement timetable were disclosed in the brief update.

2130

Bonzo Finance

2026-07-17 00:46:54

Bonzo Finance says Bonzo Lend users will be fully reimbursed after oracle attack

Bonzo Finance Labs said in a post on X that the Bonzo Finance Foundation will provide full reimbursement following the July 11 oracle attack that affected Bonzo Lend. The compensation will be calculated based on users’ position status before the incident. According to the statement, the funds for the reimbursement will be backed by a recovery mechanism pledged by the Hedera Foundation. The update addresses the fallout from the attack and outlines how the project plans to cover affected positions.

2060

Ostium

2026-07-15 17:01:25

Ostium loses about $18 million after oracle signer key compromise, Blockaid says

Ostium, a decentralized perpetuals exchange built on Arbitrum, lost roughly $18 million on Wednesday after attackers compromised an oracle signer key and manipulated the platform’s price feed, according to blockchain security firm Blockaid. The firm said the attacker used a registered PriceUpKeep forwarder and future-dated authorized oracle reports to fabricate trading profits, which then triggered a multi-million USDC payout from Ostium’s OLP liquidity vault. Ostium acknowledged the issue on X, said it had paused all trading, and noted that its team was investigating. At the time of the attack, Ostium held about $63 million in total value locked, putting the loss at close to one-third of protocol liquidity. The exchange offers decentralized perpetual futures tied to real-world assets such as stocks, commodities, foreign exchange markets, and indices. The incident lands in a year that has already seen heavy losses across decentralized finance. Decrypt reported that more than $840 million was stolen from DeFi protocols in the first five months of 2026, including $292 million from KelpDAO and $285 million from Drift Protocol, while Resolv Labs lost more than $25 million in June. The report also highlighted security warnings that advances in artificial intelligence are speeding up vulnerability discovery, with ThreatLocker CEO Danny Jenkins and security researcher Taylor Hornby pointing to AI’s growing ability to uncover complex software flaws.

1510

Ostium

2026-07-15 15:27:43

Ostium hit for $18 million in exploit tied to falsified oracle data

DeFi protocol Ostium has suffered an $18 million exploit, according to CoinDesk. The report says the attacker turned Ostium’s own price-reporting infrastructure against the protocol by submitting falsified oracle data dated in the future. That manipulated input was then used to manufacture fake trading profits inside the system and trigger an $18 million payout. The incident comes as oracle-related attacks continue to affect DeFi protocols. CoinDesk identified the case as part of a broader wave of oracle attacks hitting the sector. The article was written by Oliver Knight and edited by Cheyenne Ligon, with publication timestamped July 15, 2026.

1450