Blend Pools V2
HackedDeFi · born 2024 · ✝ 2026
A manipulated oracle siphoned ~$11M on Stellar.
Blend Pools V2 was a lending protocol built on Stellar's Soroban smart-contract platform. In 2026 an attacker manipulated the price oracle feeding its pools, distorting collateral values to borrow against them and draining roughly $11M.
- Peak
- ~$11M stolen
- Cause
- Hacked
- Year of death
- 2026
☠️ Cause of death
The protocol relied on a manipulable price feed, so an attacker could skew reported prices and over-borrow against undervalued or overvalued collateral.
📓 Lessons left behind
- —New chains do not exempt you from old oracle attacks.
- —Use manipulation-resistant, multi-source price feeds.
- —Stress-test collateral pricing against an adversary controlling the market.
🌱 The idea that survived
Resilient oracle design
Reinforced that lending on any chain needs manipulation-resistant pricing.
#defi#oracle#stellar