Crypto Security Firm CertiK Reports New Oracle-Based Exploit - Crypto Economy

robot
Abstract generation in progress

A serial hacker is targeting DeFi lending protocols through oracle misconfigurations, with total losses reaching approximately $3.5 million so far. The latest incident impacted Ploutos Money, which lost nearly $400,000 following an apparent price oracle error.

Blockchain security firm CertiK reported that the protocol was exploited for 187.36 ETH (around $388,000) due to a misconfigured oracle. Shortly after the attack, Ploutos’ website and social media accounts were deleted.

According to analysis from blockchain auditor BlockSec, Ploutos Money incorrectly used Chainlink’s BTC/USD price feed as the oracle reference for USDC. This configuration flaw enabled the attacker to manipulate collateral valuation. The exploit occurred just one block after the configuration change was confirmed. The attacker was able to borrow 187 ETH while posting only eight USDC as collateral.

Pseudonymous on-chain investigator Tanuki42 linked the same exploiter to at least four other hacks, including two million-dollar incidents affecting Moonwell. Last week, Moonwell was left with $1.8 million in bad debt after a misconfigured oracle returned a cbETH price of $1.12 instead of approximately $2,200.

A similar exploit impacted Veil.Cash, a privacy protocol on Base, last week. However, losses were limited to approximately 4.5 ETH, of which 2 ETH were recovered by white-hat security team Decurity.


Source: Reports from CertiK


Disclaimer: Crypto Economy Flash News is prepared using official and publicly available sources verified by our editorial team. Its purpose is to provide rapid updates on relevant developments within the crypto and blockchain sector.

This information does not constitute financial advice or an investment recommendation. Readers should verify official channels before making related decisions.

ETH-1,08%
BTC-1,22%
USDC-0,01%
LINK-1,25%
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
0/400
No comments
  • Pin

Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate App
Community
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)