CryptoCrime Watch — Tracking Fraud · Protecting Investors

Lending Protocol Drained After Oracle Manipulation Attack

The attacker exploited a thin-liquidity pricing feed to borrow against collateral at inflated valuations.

By Priya Shah, On-Chain Forensics Reporter· May 28, 2026 at 12:13 PM· 5 min read
Lending Protocol Drained After Oracle Manipulation Attack
Lending Protocol Drained After Oracle Manipulation Attack

A mid-sized DeFi lending protocol was drained of approximately $42 million on Tuesday after an attacker manipulated the protocol's oracle pricing feed, borrowing against deposited collateral at inflated valuations and walking away with the proceeds before liquidations could be triggered.\n\nThe attack pattern is one of the most common in DeFi exploits over the past three years and is typically prevented by using multi-source oracles with manipulation-resistant time-weighted averages.

The Daily Briefing

Stay ahead of the next enforcement action

Free weekday newsletter on indictments, sanctions, exploits, and rulings — for lawyers, journalists, and investigators.

Related Coverage