Ploutus oracle misconfiguration exploited, liquidity pool loss of approximately $390,000

SmartContractAuditor · 2026-02-26T09:06:22+00:00

The liquidity pool of the Ploutus protocol on the Ethereum chain was attacked due to an oracle configuration error, resulting in a loss of approximately $390,000. The attacker exploited price discrepancies, collateralizing only 8 USDC to borrow 187 ETH, demonstrating a rapid exploitation of the parameter update vulnerability.

SmartContractAuditor

2026-02-26 09:06:22

Abstract generation in progress

Odaily Planet Daily reports that the on-chain Ploutus protocol liquidity pool (0xD060…945D2) on Ethereum was attacked due to an oracle configuration error, resulting in a loss of approximately $390,000.

Analysis shows that the pool incorrectly pointed the USDC price to Chainlink’s BTC/USD feed, causing a significant deviation in the price. The attacker exploited this vulnerability by collateralizing only 8 USDC to borrow 187 ETH. On-chain data indicates that the attack transaction occurred in the next block after the configuration change was confirmed, suggesting the attacker monitored the updates in real-time and quickly exploited the parameter change.

ETH-1.51%

BTC-1.6%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

1 Likes