DeFi Oracle Attacks Surge to Record High with 32 Incidents This Year

Decentralized finance (DeFi) lending protocols are facing a growing threat from oracle price manipulation attacks, which have skyrocketed to a record 32 incidents this year, according to blockchain intelligence firm TRM Labs.

The method involves artificially inflating the price of low-liquidity altcoins and using them as collateral to borrow major cryptocurrencies. DeFi lending protocols rely on price oracles - data feeds that supply real-time asset prices - to determine collateral values and loan terms.

When an oracle is compromised or manipulated, an attacker can distort the reported price of a token, allowing them to borrow more stable assets like Ether or USDC, often exceeding the protocol's intended loan-to-value limits. The attacker then withdraws the funds and the price correction leaves the protocol with bad debt.

TRM Labs noted that price manipulation now accounts for roughly one-eighth of all hacking attacks in the crypto space, up from about one-seventeenth in 2022. This increase reflects a broader trend where attackers are shifting toward lower-cost, higher-probability exploits rather than complex smart contract vulnerabilities.