Dexodus Finance Hack

On May 26, 2025, Dexodus Finance was exploited for approximately $291,000 through a price manipulation attack targeting its leveraged perpetuals module. The vulnerability stemmed from accepting outdated Chainlink oracle data via the performUpkeep() function, allowing the attacker to profit from stale pricing within a single transaction.

The attacker submitted a valid but stale Chainlink price report to performUpkeep(), opening a long position at an artificially low price of ~$1,816. Within the same transaction, they closed the position using a fresh price of ~$2,520, extracting nearly $300,000. The exploit was made possible due to missing freshness checks and weak replay protection in the verify() function, which failed to ensure the recency of the price report. Since Chainlink Data Streams can remain valid for up to a month, the absence of real-time data validation in high-frequency trading scenarios proved critical. Dexodus Finance acknowledged the flaw, has paused the affected contracts, and committed to refunding users.

Exploit tx:

https://basescan.org/tx/0x6ffb4942…18147e