Tools Crypto Exploit Tracker exploit-0066
Exploit record
Moonwell cbETH Oracle Incident
- Loss
- $2M
- Attack vector
- Oracle Manipulation
- Chain
- Base
- Sector
- Borrowing
What happened
On February 15, 2026, Moonwell on Base suffered about $1.78M in losses when cbETH was mispriced at roughly $1.12 instead of around $2,200, triggering mass liquidations and cheap borrowing.
This was not subtle. The oracle pipeline effectively passed through a token ratio without multiplying it back into the dollar value of ETH. That meant the protocol treated cbETH as almost worthless. Liquidation bots stepped in, repaid pocket change, and received outsized chunks of collateral. Other users borrowed against the same broken number. Moonwell moved to clamp the market fast, but not before the bad price had already done its damage.
On-chain references
- Affected Assets
cbETH (primary), cbBTC, tBTC
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026