Decentralized lending protocol Moonwell has temporarily restricted borrowing across its Core Markets on the Base network after attackers extracted roughly $8.7 million by manipulating a price oracle tied to the low-liquidity MAMO token. The incident allowed the attackers to use inflated collateral to borrow higher-value assets, which were later converted to the DAI stablecoin.
Moonwell Halts Borrowing on Base
Moonwell said it suspended borrowing on Base as a precaution while the team investigates the exploit. The restriction aims to contain risk across affected markets and will remain in place until the protocol completes its review and implements any necessary fixes.
Oracle Manipulation of MAMO Token
According to initial details, the attackers artificially increased the on-chain price of MAMO, a token with limited liquidity. By inflating MAMO’s price in the oracle used by the protocol, they boosted the apparent value of their MAMO collateral, enabling them to borrow more valuable assets from Moonwell’s markets. Those borrowed assets were then swapped into DAI.
Oracle manipulation is a known attack vector in decentralized finance (DeFi), particularly when low-liquidity tokens influence collateral valuations. If a price feed can be skewed, collateral can be overvalued, allowing attackers to drain protocol reserves.
Impact and Next Steps
- Estimated loss: approximately $8.7 million.
- Attack vector: price oracle manipulation of the MAMO token.
- Network affected: Base.
- Immediate response: borrowing paused across Moonwell’s Core Markets on Base.
Moonwell is continuing its investigation and is expected to provide further updates on the status of borrowing markets, remediation measures, and any recovery efforts.
Why It Matters
The incident underscores the importance of robust oracle design and liquidity safeguards in DeFi lending markets. Ensuring that collateral pricing cannot be easily skewed is critical to protecting platform reserves and user positions, especially when supporting lower-liquidity assets.