What happened
On March 15, 2022, an attacker used flash liquidity to manipulate the Fantom USDC/DEI pool price used by DEUS Finance's lending logic, causing user positions to appear insolvent and extracting roughly $3 million.
Technical Root Cause
The lending and liquidation path accepted a manipulable AMM spot price for the USDC/DEI pair as an oracle input, allowing temporary flash-loan price distortion to change collateral and liquidation outcomes.
Case & protocol details
Classification
Oracle Manipulation
Protocol Type
CDP
Affected asset / contract
DEI
Implementation language
Solidity
Official Website
deus.finance/
Protocol Twitter/X
@DeusDao
How it happened
- The attacker obtained flash liquidity and distorted the USDC/DEI pool price used by the Fantom lending system.
- The manipulated valuation made borrower positions appear insolvent, allowing the attacker to liquidate them.
- The transaction unwound the price-manipulation position and repaid the borrowed liquidity, extracting roughly $3 million.
This case covers March 15, 2022. The later April 28 DEUS exploit was a separate incident and its losses should not be added to this transaction's total.
Evidence & learning
Sources and on-chain records
- report Report lafayettetabor.medium.com
- report Post-mortem rekt.news
- report Report twitter.com
- analysis DEUS Finance DAO suffers $3 million flash loan attack theblock.co
- analysis Derivatives Platform Deus Finance Exploited for $3M on Fantom Network coindesk.com
- analysis Deus Finance Suffers $3M Oracle Exploit cryptobriefing.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.