Tools Crypto Exploit Tracker exploit-0137
Exploit record
Inflated NSTR oracle price lets one account borrow $3.5m from Nostra
- Loss
- $3.5M
- Attack vector
- Oracle Manipulation
- Chain
- Starknet
- Sector
- Lending
What happened
On 17 September 2026, a manipulated NSTR oracle price let one account borrow approximately $3.5m worth of ETH, STRK, USDC, USDT, WBTC and DAIv1 against NSTR collateral in the Nostra money market on Starknet. Nostra paused the money market the same day.
The figures are Nostra’s own, from its incident statement at 13:28 UTC on 17 September, and DefiLlama carries the incident at $3.5m under oracle manipulation. The pause covers the money market’s activity while the team works through the position.
Sources
- Nostra incident statementx.com/nostrafinance/status/2100577538053493076
- DefiLlama incident recorddefillama.com/hacks
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 27 September 2026