oracleattack

$OST LIQUIDITY VAULT DRAINED $18M IN ORACLE ATTACK 🚨

This is exactly the kind of exploit that keeps me up at night. Ostium's oracle system was supposed to be trusted, but one PriceUpKeep forwarder with manipulated timestamps drained 18 million USDC from the vault. The attacker gamed the protocol's own price reporting.

If you're trading perps, this is a reminder that oracle security is everything. Privileged keepers and future timestamps are a dangerous combo — they can turn a losing position into a payout with zero real market movement.

How do you vet the oracles behind the positions you trade?

Not financial advice. Always manage your risk.

#OST #OracleAttack #DeFiRisk #Crypto

🔥

18 million USDC vanished from Ostium with just a single click using forged oracle data. The attacker exploited the PriceUpKeep component in the protocol’s automation system, sending price reports with timestamps in the future to turn a losing order into a profit—triggering an 18 million payment from the vault. The incident occurred on Arbitrum, following last week’s 6 million USD withdrawal from Summer.fi.

Both cases exploited the same vulnerability: privileged access over the oracle infrastructure and the keeper. When an attacker gains control of these roles, they can distort price data and the timing pushed onchain—no matter how secure the smart contracts are.

Ostium has handled more than $50 billion in volume and raised nearly 28 million from major funds. An attack like this shows DeFi still has blind spots in the automation layer. If you’re trading perps on custom oracle protocols, always check the keeper protection and redundancy mechanisms across multiple sources. Infrastructure risk can sometimes be even bigger than price volatility.

DYOR—there’s nothing “too big to fail” in crypto.

#Bảomật #DeFi #Layer2 #Ostium #OracleAttack

Ostium loses $18 million USD in the Oracle attack wave targeting DeFi

- A hacker exploited Ostium’s own quotation infrastructure to attack the protocol.
- The attacker sent forged oracle data about the future, generating profits from fake transactions and withdrawing $18 million.
- This is part of an oracle attack wave targeting DeFi platforms.

#DeFi #Ostium #OracleAttack #CryptoNews #Security

$btc $eth

vlikevn Titanbot

Source: CoinDesk

$HBAR BONZO FINANCE SUFFERS ORACLE ATTACK — $9M DRAINED 💥

This incident underscores a systemic vulnerability in DeFi. The attacker used only 250 SAUCE to manipulate Supra's oracle price feed, inflating it by 12 levels, then borrowed $6.63M USDC and $34.5M HBAR. Supra confirmed and fixed the issue, but the damage is done.

Third-party oracles remain the weakest link in lending protocols. With a single manipulated price, nearly $9M was extracted. Should protocols mandate multi-oracle backup systems and volatility-based borrowing limits?

Not financial advice. Always manage your risk.

#HBAR #DeFi #OracleAttack #CryptoNews #Security

💥

Nine million dollars evaporated after a single click — Bonzo Lend on Hedera has just suffered an exploited oracle attack that caused TVL to plummet by 77% overnight.

The attacker loaded 250 super-cheap SAUCE tokens, manipulated the oracle price from Supra, then took out 6.63 million USDC and 34.52 million wrapped HBAR. A second “white-hat” stepped in and promised to return about $1 million, but the actual damage has already reached $9.05 million.

Consequences: Hedera’s entire TVL dropped by nearly 40% in 24 hours, leaving just $25.7 million. A blow to confidence for an ecosystem that’s already small.

For futures traders, the lesson is still the same but newly reinforced: third-party oracles are a deadly weakness, and low-liquidity tokens are always a “weapon” for bad actors. Don’t long/short based on emotions before news like this — liquidity can dry up at any time.

I’m not saying Hedera will die, but it’s clear that systemic risk is already present. DYOR, manage your capital tightly, and don’t let an oracle loophole blow up your account.

#DeFi #Bảomật #Hedera #BonzoLend #OracleAttack

The 400M+ Blind Spot Nobody Talks About

Smart contracts get all the hype. But the real killer is oracle attacks.

In 2026 alone, DeFi exploits topped 775 million, and oracle manipulation is a top culprit. Even Binance lost 19 billion in hours from a pricing oracle flaw.

Here is how the attack works:

1. Flash loan. Borrow millions with zero collateral.
2. Price manipulation. Dump on low-liquidity DEX to crash price.
3. Oracle exploit. Fake price fed to protocol blindly.
4. Fund drain. Borrow or liquidate and walk away rich.

How to protect yourself:

· Use protocols with decentralized oracles like Chainlink.
· Check for price deviation monitors.
· Look for time-weighted averages or TWAPs.
· Ensure circuit breakers exist.

The bottom line: smart contracts are only as secure as the data they consume. Oracle risk is the elephant in the room, and it is time we start talking about it.

What is your take? Have you ever checked where your DeFi protocol gets its prices?

#defi #Crypto #OracleAttack #BinanceSquare #CryptoEducation
$LINK $BAND $PYTH