Moonwell has just become a victim of a price manipulation attack, suffering losses of up to $8.7 million. The root cause of this attack lies in the MAMO price oracle feed, which is based on thin market liquidity.
Security vulnerabilities in DeFi lending protocols have long existed, and oracle price manipulation is a well-worn problem. But this incident once again rings an alarm bell for the entire industry: using price feeds that rely on low-liquidity assets, in essence, opens the door for attackers. With only a small amount of capital, they can move prices and then manipulate the liquidation process to extract protocol funds.
Security incidents have been frequent on the Base chain recently. As projects develop on-chain, they must conduct multiple validations of the oracle price-feeding mechanism. They cannot rely entirely on third-party oracle feeds. Especially for niche low-liquidity assets, additional risk control measures are required; otherwise, users’ asset safety simply cannot be guaranteed.
Moonwell’s official team has already confirmed the losses from this incident. The follow-up handling plan is yet to be announced. In the meantime, everyone participating in DeFi projects should stay more vigilant about risks in the near term, and try to avoid small-cap protocols whose mechanism design is incomplete.
#DeFi #加密安全 $BASE
Security vulnerabilities in DeFi lending protocols have long existed, and oracle price manipulation is a well-worn problem. But this incident once again rings an alarm bell for the entire industry: using price feeds that rely on low-liquidity assets, in essence, opens the door for attackers. With only a small amount of capital, they can move prices and then manipulate the liquidation process to extract protocol funds.
Security incidents have been frequent on the Base chain recently. As projects develop on-chain, they must conduct multiple validations of the oracle price-feeding mechanism. They cannot rely entirely on third-party oracle feeds. Especially for niche low-liquidity assets, additional risk control measures are required; otherwise, users’ asset safety simply cannot be guaranteed.
Moonwell’s official team has already confirmed the losses from this incident. The follow-up handling plan is yet to be announced. In the meantime, everyone participating in DeFi projects should stay more vigilant about risks in the near term, and try to avoid small-cap protocols whose mechanism design is incomplete.
#DeFi #加密安全 $BASE