DeFi Price Manipulation Epidemic: 32 Exploits in 2026
KuCoin and other DeFi platforms have been grappling with a record number of price manipulation exploits in 2026, according to TRM Labs. There were 32 such attacks this year alone, exceeding any previous full year's total.
The most notable case was the Tectonic exploit on August 30, where an attacker inflated the price of TONIC roughly 100 times in just 20 minutes and borrowed approximately $75 million. The amount stolen was equivalent to about 245 times the weekly trading volume of TONIC at the time.
The DeFi lending market is particularly vulnerable to such attacks because it relies on the assumption that collateral can be valued and liquidated at the price observed on-chain. If a token's real liquidity is low, an attacker can artificially inflate its value until the protocol values it much higher, generating a large borrowing capacity in genuinely liquid assets.
Other DeFi protocols have also suffered from similar attacks, including Moonwell, Rhea Lend, and Bonzo Lend. The response of Cronos to the Tectonic exploit sparked debate about transaction finality and the limits of governance in decentralized networks.