Nostra Faces $3.5 Million Loss from Rigged Oracle Pool
Nostra experienced a significant loss due to a manipulated oracle price feed. The incident involved a fake NSTR price that was 8,306 times the actual value, leading to unauthorized borrowing.
Our full investigation: Nostra exploit: the $2M that reached Ethereum is still on one wallet — after a Railgun deposit came straight back
A rigged pool provided Nostra's oracle with a fraudulent NSTR price, which was 8,306 times higher than the real value. This manipulation enabled an unauthorized borrowing of $3.5 million on Starknet. Pragma had previously warned Nostra about the high-risk nature of the price feed, indicating awareness of potential vulnerabilities before the incident occurred.
As a result of this incident, the money market associated with Nostra remains paused, and there has been no post-mortem analysis released to date. The lack of a detailed examination may hinder understanding the full implications of the event and the steps needed to prevent similar occurrences in the future.
Addresses in this incident
| Address | Chain | Role | Check |
|---|---|---|---|
| 0xa059aaab82773caf622de9d9a0f2dbf9aa7f3c37 | ETH | mentioned in coverage | Check live |
| 0x8f05ee3d885f4b722b37e613cd002776418efe40 | ETH | mentioned in coverage | Check live |
| 0xc5e77358fc7e4810713fd513d3a68934f5db4912 | ETH | mentioned in coverage | Check live |
Roles are attributed to the source that stated them. Addresses without an attributed role are listed because coverage mentioned them, not because we assign them a part in the incident.