Crypto glossary
Oracle manipulation
Oracle manipulation is an attack that distorts the price a DeFi protocol reads from its oracle, so the attacker can borrow too much or trade at a false price.
DeFi lending markets and derivatives platforms need prices to value collateral and settle positions. If a protocol takes that price from a single thin market, such as one DEX pool, an attacker can move the pool's price with a large trade, often funded by a flash loan, and then use the distorted value before the market corrects.
The best-known case is Mango Markets in October 2022: the attacker pushed up the price of the MNGO token on the few markets the oracle used, which inflated the value of his own position, and then borrowed more than 100 million dollars against it. Smaller lending protocols that list illiquid tokens have suffered similar attacks many times.
Protocols reduce the risk by using decentralised oracle networks such as Chainlink that aggregate many sources, time-weighted average prices that are expensive to move, borrowing caps on illiquid assets and circuit breakers that pause activity when prices jump abnormally.
Example
An attacker flash-borrows 50 million USDC, buys a thinly traded token on the only DEX the oracle reads, posts the now overvalued token as collateral, borrows other assets and leaves the protocol with bad debt.
