DeFi Price Manipulation Exploits Surge to Record High

The number of DeFi price manipulation exploits has tripled to 32 in 2026, according to TRM Labs. This is a significant increase from just 12 incidents in all of 2025.

This type of exploit involves an attacker manipulating the price of a token to make it appear more valuable than it actually is. They then use this manipulated price to borrow against the collateral, draining funds from the lending protocol before the market corrects.

The mechanics behind these attacks are relatively simple: an attacker identifies a lending market that accepts a thin, low-liquidity token as collateral and buys up the token aggressively or compromises the oracle feed directly. This causes the reported price of the collateral to spike far above its fair value within minutes.

In some cases, attackers have been able to pull off these exploits with relatively little capital. For example, in a recent incident involving Full Sail's Sui protocol, an attacker was able to drain approximately $91,000 from three affected vaults by manipulating the oracle feed and reporting a false price.