Moonwell DeFi Protocol Suffers $1.12M Loss from Pricing Glitch
A configuration error in a Chainlink price oracle caused Moonwell to misprice cbETH, allowing bots to exploit the vulnerability and drain millions in ETH collateral.
DeFi lending protocol Moonwell experienced a significant financial incident resulting in an estimated loss of $1.12 million due to a faulty price oracle. The issue stemmed from a misconfiguration of a Chainlink price oracle, which incorrectly reported the value of Coinbase Wrapped ETH (cbETH).
Instead of reflecting the asset's accurate market price of approximately $2,200, the oracle briefly displayed cbETH's value at a mere $1.12. This drastic misvaluation created a substantial arbitrage opportunity.
Exploitative bots quickly identified the discrepancy and leveraged the erroneous pricing to seize millions in ETH collateral from the Moonwell protocol. The compromised collateral was subsequently drained before the issue could be rectified.
The incident highlights the critical importance of robust price oracle security and accurate data feeds within the DeFi ecosystem. A single point of failure in such a fundamental component can lead to substantial financial losses and erode user trust.
Originally reported by CoinDesk.