Oracle Manipulation
Forcing a protocol to read a false price.
Moving a manipulable price source (spot reserves or desynced internal accounting) so a protocol acts on a value the attacker controls within a single transaction.
Related cases
- GMX V1 $42M Case Research: Reentrancy and the Split-Brain Short Accounting That Forged a GLP PriceDeFi Exploits
- EIP-7702 Flashloan-Protection Bypass Case Research: When tx.origin == msg.sender Stopped Meaning EOADeFi Exploits
- Cetus $223M Case Research: The CLMM Shift Check That Minted Liquidity for One UnitDeFi Exploits
- KiloEx $7.5M Case Research: A Trusted Forwarder That Let Anyone Become the Price KeeperDeFi Exploits
- Cork $12M Case Research: HIYA Price Skew Meets an Unauthenticated Uniswap v4 HookDeFi Exploits
Related attack patterns
Related tools