Nostra Finance
- Funds lost
- $3.5M
- Attack type
- Oracle Issue
- Category
- Borrowing and Lending
Summary
On September 17, 2026, Starknet money market Nostra Finance suffered an oracle price manipulation exploit resulting in ~$3.53 million in unauthorized borrows across ETH, STRK, USDC, USDT, WBTC, and DAIv1 against inflated NSTR collateral, forcing the protocol to pause all lending, borrowing, and liquidation operations.
Details of the Exploit
The attacker exploited Nostra Finance's collateral valuation oracle for NSTR by manipulating its underlying price pool on Ekubo DEX. The attacker withdrew existing liquidity around NSTR's real market price, seeded a decoy liquidity band at $99 per NSTR, and routed a $14.72 dust swap (190 NSTR) through the gap to artificially inflate the oracle price by 16,645x. Using just 294,177 NSTR collateral, normally worth ~$1,756, the attacker leveraged the inflated valuation to draw $3,531,922.97 in mixed assets across six borrowing legs.
The attacker then bridged ~$1.93 million (234.57 ETH and 1.3M DAI) to Ethereum while leaving ~$1.55 million in assets on Starknet.
Source: De.Fi REKT Database. Data as of November 5, 2026.
Related incidents
- Papertrade: $1.3M lost, October 10, 2026
- Cozy Finance: $170K lost, September 2, 2026
- Tectonic Protocol: $75.0M lost, August 30, 2026