Pragma flags 6 of 22 Starknet market feeds as critical risk

  • Pragma classified six mainnet market and rate feeds as critical risk.
  • $10,000 sell quotes deteriorated 15% to 22% versus $10 quotes across four tokens.
  • Nostra paused lending, borrowing, withdrawals and liquidations after the Sept. 17 exploit.

Oracle provider Pragma classified six of 22 mainnet market and rate feeds as critical risk in a Sept. 18 assessment, warning that a token price alone does not show whether collateral can be sold to repay a loan. The review followed a Sept. 17 borrowing exploit at Nostra, a lending protocol on Starknet, where Nostra said a manipulated NSTR oracle price enabled one account to borrow approximately $3.5 million of other assets against NSTR collateral. Pragma rated BROTHER, $DAI, DOG, EKUBO, LORDS and NSTR as critical, while assigning nine other feeds a high-risk rating. The assessment does not establish that every listed feed is used as collateral. Pragma found that indicative $10,000 sell quotes deteriorated by about 15% for NSTR, 17% for EKUBO, 22% for LORDS and 20% for BROTHER compared with $10 quotes. Its $DAI finding concerned source concentration and tested Starknet token routes; differing current and legacy deployments mean the rating should not be interpreted as proof that $DAI is globally illiquid. The provider also warned that multiple publishers or aggregators can depend on the same underlying markets, so several source labels may represent overlapping liquidity. Pragma said the affected oracle response had two contributing sources, that a mandatory three-source minimum would have rejected it, and that its integration guidance recommends freshness checks and risk-adjusted thresholds. It attributed the deviating input to a manipulated on-chain pool and found no decimals or median-calculation error. Nostra said it paused lending, borrowing, withdrawals and liquidations while assessing the impact and tracing funds, with final losses and potential recoveries still unknown. Subsequent withdrawal and recovery status remained unconfirmed, while Pragma separately said the attacker’s address had been frozen and recovery work was ongoing. The assessment underscores that lenders must evaluate collateral eligibility, exposure limits and liquidation liquidity rather than relying on the existence of an oracle price alone.

The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.