Nostra Loses $3.5M to Oracle Manipulation Hack

A single account exploited a manipulated price feed for NSTR, Nostra's own governance token, to borrow roughly $3.5 million in assets against collateral that was never really worth that much. Security firm PeckShield flagged the incident, reporting that the attacker used the distorted NSTR oracle reading to withdraw a mix of ETH, STRK, USDC, USDT, WBTC and DAI from Nostra's money market on Starknet. The attacker has since bridged roughly $1.92 million of the stolen funds off Starknet and onto Ethereum, including 234.57 ETH and about 1.3 million DAI, complicating any attempt to freeze or claw back the remaining balance.

Oracle manipulation attacks like this one exploit a structural weak point common to lending protocols: the smart contract itself has no independent way to know an asset's real market price, so it relies on an external price feed to decide how much a borrower can withdraw against their collateral. If that feed can be pushed away from the asset's true trading price — whether by thin liquidity, a flash loan, or manipulating the specific market the oracle reads from — a borrower can make worthless or overvalued collateral look far more valuable than it is, and walk away with real, liquid assets in return. NSTR, as Nostra's own native token, is a narrower and more easily distorted market than a blue-chip asset like ETH, which is part of what made it a viable attack surface here. It's a similar dynamic to the one behind a separate $736,000 double-spend that forced Chainflip to halt its Tron route — a narrower, less liquid piece of infrastructure giving an attacker more room to move than a deeper, more heavily arbitraged market would.

Money market lending exploits remain a recurring DeFi failure mode

The Nostra incident fits a pattern that has repeated across the sector for years: protocols that accept a smaller, more volatile token as loan collateral are exposed whenever that token's price feed can be moved independently of the assets being borrowed against it. Starknet-based protocols in particular have drawn scrutiny over their oracle dependencies in recent months, as the network's still-maturing DeFi ecosystem means many of its money markets rely on a narrower set of liquidity venues than equivalent protocols on Ethereum mainnet — making price feeds comparatively easier to move with a given amount of capital.

Nostra has not yet published a detailed post-mortem or confirmed whether the roughly $1.58 million still sitting on Starknet can be frozen before it, too, is bridged out — the kind of race against the clock that forced Osmosis to halt BTC alloyed minting after a Nomic bridge security incident earlier this year, in order to contain the fallout once stolen funds started moving cross-chain. Protocols typically have a narrow window to act once an exploit is flagged publicly, since public disclosure both warns users to withdraw remaining funds and tips off the attacker that the clock on any recovery effort has started. A recent MEV bot front-running a Safe exploit to save $7.7 million in rsETH showed one of the rare cases where that window closed in the defenders' favor; Nostra's team does not appear to have had the same head start here.

Exploits like this one often end in one of two ways: the protocol team negotiates directly with the attacker for a partial return of funds in exchange for treating the incident as a disclosed vulnerability rather than a criminal theft, or the funds are laundered through bridges and mixers before any negotiation can begin. The fact that the attacker moved to bridge assets off Starknet within hours, rather than waiting to see whether Nostra would respond, suggests this case is trending toward the latter outcome, though PeckShield's continued monitoring means any further movement of the remaining funds is likely to be tracked publicly in real time.

FAQ

What is oracle price manipulation in DeFi?
It's an attack where someone distorts the price feed a lending protocol relies on to value collateral, making an asset appear worth more than its real market price so they can borrow more against it than the collateral is actually worth.

Can Nostra recover the stolen funds?
Recovery isn't guaranteed. The attacker has already bridged about $1.92 million of the roughly $3.5 million taken from Starknet to Ethereum, which makes tracing and potentially freezing those specific funds harder than if they had stayed on the original chain.

Is user collateral on Nostra still safe?
Nostra hasn't published a full post-incident report confirming what, if any, protocol-level fixes have been applied to the NSTR price feed, so affected users should watch for an official statement before assuming the underlying vulnerability has been closed.