Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Mycelium Oracle Attack: $300.00K Reported Loss

·Historical incident record

Incident Overview

Mycelium, a perpetual agreement, tweeted that due to the oracle feeding problem of the ETH-USD trading pair, MLP suffered a loss of 4~6% from robot arbitrage (the current pool size is about $6.6 million, and the estimated loss is about $300,000), but the team has fixed the loophole and resumed trading. The reason for this is that due to the fact that Binance began blocking US IPs in late December, one of Mycelium's three oracle data vendors went offline, and the other vendor also seemed to have gone wrong overnight, resulting in prices relying only on Coinbase and Bitfinex. Coinciding with about 4 pm yesterday, Bitfinex's ETH-USD feed price fluctuated significantly, and the spread was extremely large, perhaps the arbitrage robot detected the spread and began to arbitrage at a higher than usual amount, resulting in a loss of MLP.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    LendHub

    Attack methodContract Vulnerability
    Reported loss$ 6,000,000
  2. Incident date
    Attack methodAccount Compromise
    Reported lossNot disclosed
  3. Incident date
    Target

    Rubic

    Attack methodData incoming error
    Reported loss$ 1,400,000
  4. Incident date
    Attack methodAccount Compromise
    Reported loss$ 50,000
  5. Incident date
    Attack methodScam
    Reported loss$ 2,900,000