Nostra paused its Starknet money market after a manipulated NSTR price oracle allowed one account to borrow roughly $3.5 million in ETH, STRK, USDC, USDT, WBTC and DAIv1 against inflated collateral. Lending, borrowing, withdrawals and liquidations remain suspended while the protocol reconciles asset pools and traces the funds; Nostra says the final loss and potential recoveries remain unknown. PeckShield reported that $1.92 million, including 234.57 ETH and 1.3 million DAI, was bridged to Ethereum. Total value locked fell from about $4 million on Sept. 16 to roughly $710,632, according to DefiLlama. The exploit was Starknet’s second oracle-related incident in September, following a Pragma publishing error that triggered liquidations on Vesu. The incident occurred amid reported crypto security losses of $1.1 billion across more than 212 on-chain incidents in the first half of 2026.