⚠️Oracle Manipulation Analysis:
Aug 27:
@MoonwellDeFi ’s $MAMO collateral oracle got manipulated. ~$8M drained. Attacker extracted real liquidity from the $mcbBTC market.
Root cause: thin-liq $MAMO was listed as Moonwell collateral. Attacker pumped the oracle print from ~$0.0105 to ~$0.088 — about 8x — so the mMAMO position’s book value went wildly oversized. Then they looped borrows of real cbBTC out of Moonwell’s cbBTC Core Market (mcbBTC).
Attacker: 0x719eae70d4A83f35bF82A2740699F5db84BE919D
Attack contract: 0xAbDA3Cfe3ce2668b7829AAccBE594Abb326BCe4F
Hit contracts: 0xF877ACaFA28c19b96727966690b2f44d35aD5976 (mcbBTC) 0xEdc817A28E8B93B03976FBd4a3dDBc9f7D176c22 (mUSDC) 0x627Fe393Bc6EdDA28e99AE648fD6fF362514304b (mwstETH)
Example attack txs:
We are aware of an issue affecting the MAMO Core Market on Base and are actively investigating.
As a precaution, borrow caps for all Core Markets on Base have been set to 1 wei, preventing new borrowing and limiting the potential for further impact. The supply caps for MAMO and WELL have also been set to 1 wei. All other supply caps remain unchanged.
We will share another update as soon as we have more information.
더 보기