SlowMist Research
@slowmist_team · 2m
Solana account permission changes need clear wallet simulation. Users should inspect owner reassignment instructions before signing.
LP
HIGHSolanaOracle ManipulationCONTAINED
Loopscale
Oracle manipulation against RateX PT collateral enabled undercollateralized loans from Loopscale's USDC and SOL Genesis Vaults.
Loss
$5.8M
Risk
Recovered DeFi lending incident
Confidence
92%
AI Generated Breakdown
Reporter Agent synthesis with forensic confidence scoring
Attack explanation
The attacker manipulated a collateral price feed, inflated perceived value, borrowed against it, and withdrew 5.7M USDC plus 1,211 SOL.
Root cause analysis
Collateral pricing accepted manipulated oracle values without enough independent validation, circuit breakers, or deviation controls.
92
confidence score
Recovered DeFi lending incident
Wallet Flow Visualization
Attacker path, bridge transfers, token drains, mixer usage
Technical Breakdown
Attack vector
Oracle price manipulation against lending collateral
Vulnerability
Thin oracle validation for RateX Principal Token collateral
Affected contracts
RateX PT price adapterUSDC Genesis VaultSOL Genesis VaultLoopscale risk engineMitigation suggestions
Require independent oracle validation
Add deviation thresholds and emergency circuit breakers
Stress-test new markets during the first weeks after launch
Emergency Bridge
Move funds off Solana
Powered byLI.FI
If your assets are at risk on Solana, bridge them to a safer chain immediately via LI.FI — the cross-chain aggregator covering 60+ chains and all major Solana bridges.
From (at risk)
Solana
Bridge to
Best Route via LI.FI
Solana → Ethereum
Mayan Swift • Across • Glacis aggregated
Est. Fee
~$0.50
Open LI.FI Bridge
60+ chains · gasless swaps on Solana · Jito bundles
60+
Chains
$2B+
Volume
20+
Bridges
Exploit Timeline
00:00
Suspicious activity begins
NullTrace Scout Agent detects abnormal account, wallet, or market behavior.
00:19
Exploit pattern classified
Analyst Agent matches the activity against known Web3 attack signatures.
00:41
Funds movement traced
Forensics Agent clusters wallets, bridge routes, exchange hops, and mixer exposure.
01:12
Related posts monitored
Reporter Agent collects researcher warnings and suppresses unverified claims.
03:48
Response tracked
Protocol actions, freezes, recovery updates, and public statements are added to the dossier.
Related Tweets
Demo X/Twitter integration for researcher posts, warnings, and fake-info checks
related tweets demo scan
NullTrace links social posts to the incident by contract mentions, protocol name, researcher credibility, and fake-loss detection tags.
NullTrace Intel
@nulltrace_ai · 4m
On-chain behavior and public reports are aligned. Confidence raised after wallet clusters matched the incident pattern.
Maya Chen
@maya_sec · 7m
The important signal is not only the drain. Watch the staging wallets and the small test transactions before the main move.
Rumor Watch
@intel_filter · 10m
Unverified recovery claims are circulating. No confirmed full recovery unless the protocol or tracked wallet flows support it.
suppressed by misinformation filter
SlowMist Research
@slowmist_team · 2m
Solana account permission changes need clear wallet simulation. Users should inspect owner reassignment instructions before signing.
NullTrace Intel
@nulltrace_ai · 4m
On-chain behavior and public reports are aligned. Confidence raised after wallet clusters matched the incident pattern.
Maya Chen
@maya_sec · 7m
The important signal is not only the drain. Watch the staging wallets and the small test transactions before the main move.
Rumor Watch
@intel_filter · 10m
Unverified recovery claims are circulating. No confirmed full recovery unless the protocol or tracked wallet flows support it.
suppressed by misinformation filter
AI Voice Briefing
Generated incident narration for security leadership
briefing ready · 00:58 · analyst-grade summary