chaindrainMVP
Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.
← back to incident ledger

oracle manipulationDemo

Jan 28, 2024 · $15.8M · protocol

Narrative

On 2024-01-28, ParaSwap suffered a oracle manipulation incident resulting in approximately $15,758,290 in losses. The exploit targeted the protocol layer. A flash loan was used to amplify the attack. Attribution: dprk_lazarus. This is a demonstration entry — not a real incident.

Victims

Classification

Root cause
oracle_manipulation
Secondary causes
—
Attack layer
protocol
Strategy
market_manipulation
Actor role
target
Attribution
dprk_lazarus
Attacker address
—
Flash loan
yes
Audited at time
no
Bounty at time
no

AADAPT mappings

DEMO:AADAPT.TA0040DEMO:AADAPT.TA0007DEMO:AADAPT.T1499.001DEMO:AADAPT.T1565.003

Evidence

Disclosure date
Jan 31, 2024
Funds recovered
—
Audit firms at time
Post-mortem URLs (synthetic)
  • https://medium.com/paraswap/post-mortem-paraswap-2024-01-28
  • https://rekt.news/paraswap-rekt
tx hashes (3)
  • 0xbd528b8f71a14d8363fc7cab6d94a717747df8aee83daf377258f21014b2dab7
  • 0xd292aeb08ed9f615f80b1bcd28eec8c4e7045629e90d8598621ac05e17126a36
  • 0x3c1f12c31f5869b05c128e4251065214b1dbb9ef04ba2709f1e2e2819c49a466