Moola Market Hack

Reported loss $9.1M
Celo
Low-liquidity MOO price manipulation used to inflate lending collateral

What happened

Moola Market, a Celo lending protocol, was drained after an attacker manipulated the low-liquidity MOO market on Ubeswap. Moola accepted the resulting MOO price as collateral value, allowing the attacker to make borrowed MOO appear far more valuable and borrow the protocol's CELO, cUSD, and cEUR liquidity. The protocol paused, negotiated with the attacker, and reported that 93.1% of the funds were returned to its governance multisig.

Technical root cause

Moola's collateral risk model trusted a manipulable, low-liquidity MOO price. A time-weighted price alone did not make the input safe because the underlying Ubeswap market could be moved materially for long enough to affect borrowing power. This was an economic and oracle-design failure, not a code-bug or flash-loan exploit.

How it happened

The attacker funded an initiating wallet from Binance, supplied CELO to Moola, and borrowed MOO. They used CELO to buy and repeatedly trade MOO on Ubeswap's thin market, lifting the MOO price. Moola's collateral valuation reflected the manipulated price.

The attacker then used inflated MOO collateral to borrow CELO, cUSD, and cEUR, repeating the borrow-and-buy cycle until the lending pool's liquidity was drained. Funds were consolidated into a wallet publicly labeled by CeloScan as the Moola Market Exploiter. Following negotiation, that wallet returned assets to Moola's governance multisig. The attacker retained the unreturned portion as a negotiated bounty, including a donation to ImpactMarket.

Protocol details

Classification Oracle Manipulation / Lending Collateral
Protocol Type Lending
Affected asset / contract MOO
Implementation language Solidity
Protocol links Website @moola_market
Attacker Address 0x95B5579b323Ddc6cd290Bd4DA6e56BA019588EfC

Security review history

Evidence

Proof of concept

1 available

Sources

Understand the attack patterns

Compare incidents →
Oracle Manipulation & Price Manipulation

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes