GoPlus Security 🚦(@GoPlusSecurity):⚠️Oracle Manipulation Analysis: Aug 27: @MoonwellDeFi ’s $MAMO collateral oracle got manipulated. ~$8M drained. Attacker extracted real liquidity from the $mcbBTC market. Root cause: thin-liq $MAMO was listed as Moonwell collateral. Attacker pumped the oracle print from ~$0.0105 to ~$0.088 — about 8x — so the mMAMO position’s book value went wildly oversized. Then they looped borrows of real cbBTC out of Moonwell’s cbBTC Core Market (mcbBTC). https://t.co/ibRvJnHEzZ Attacker: 0x719eae70d4A83f35bF82A2740699F5db84BE919D Attack contract: 0xAbDA3Cfe3ce2668b7829AAccBE594Abb326BCe4F Hit contracts: 0xF877ACaFA28c19b96727966690b2f44d35aD5976 (mcbBTC) 0xEdc817A28E8B93B03976FBd4a3dDBc9f7D176c22 (mUSDC) 0x627Fe393Bc6EdDA28e99AE648fD6fF362514304b (mwstETH) Example attack txs: https://t.co/ibRvJnHEzZ https://t.co/QyCK0zPHjd

2026.08.27 14:47

⚠️Oracle Manipulation Analysis: Aug 27: @MoonwellDeFi ’s $MAMO collateral oracle got manipulated. ~$8M drained. Attacker extracted real liquidity from the $mcbBTC market. Root cause: thin-liq $MAMO was listed as Moonwell collateral. Attacker pumped the oracle print from ~$0.0105 to ~$0.088 — about 8x — so the mMAMO position’s book value went wildly oversized. Then they looped borrows of real cbBTC out of Moonwell’s cbBTC Core Market (mcbBTC). Attacker: 0x719eae70d4A83f35bF82A2740699F5db84BE919D Attack contract: 0xAbDA3Cfe3ce2668b7829AAccBE594Abb326BCe4F Hit contracts: 0xF877ACaFA28c19b96727966690b2f44d35aD5976 (mcbBTC) 0xEdc817A28E8B93B03976FBd4a3dDBc9f7D176c22 (mUSDC) 0x627Fe393Bc6EdDA28e99AE648fD6fF362514304b (mwstETH) Example attack txs:

Moonwell@MoonwellDeFi

2026.08.27 11:21

We are aware of an issue affecting the MAMO Core Market on Base and are actively investigating. As a precaution, borrow caps for all Core Markets on Base have been set to 1 wei, preventing new borrowing and limiting the potential for further impact. The supply caps for MAMO and WELL have also been set to 1 wei. All other supply caps remain unchanged. We will share another update as soon as we have more information.