Nostra Finance NSTR Oracle Manipulation
An attacker wash-traded NSTR through a fake pool to pump its price roughly 8,000x, then borrowed about $3.5 million against the inflated collateral on Nostra's Starknet money market.
Loss
3.5M
USD
An archive of cryptocurrency security incidents — hacks, exploits, bridge failures and rug pulls, documented with on-chain evidence.
An attacker wash-traded NSTR through a fake pool to pump its price roughly 8,000x, then borrowed about $3.5 million against the inflated collateral on Nostra's Starknet money market.
An attacker minted a worthless EVIL token to distort mySwap's concentrated-liquidity pool accounting on Starknet and drained about $305K of residual LP funds.
$9.5M drained from zkLend on Starknet via a precision-rounding bug in its safeMath library; repeated rounding inflated raw_balance until pools emptied.