Makina Finance Hit by $5 Million USDC Flash Loan Attack via Oracle Manipulation
Makina Finance, a decentralized finance protocol, fell victim to a $5 million flash loan attack targeting its DUSD/USDC stablecoin pool. Blockchain security firm CertiK confirmed the exploit involved oracle manipulation after the attacker borrowed 280 million USDC.
The breach saw 170 million USDC used to distort the MachineShareOracle's pricing data, enabling the subsequent drainage of $5 million. MEV bots compounded the damage by front-running transactions, capturing most stolen funds before the protocol could react.
Makina assured users the attack was contained to one pool, with other assets remaining secure. Discrepancies emerged in loss estimates, with GoPlus Security pegging damages at $5.1 million while PeckShield reported $4.13 million in ether value drained.