What happened
On March 28, 2025, Vicuna Finance’s Sonic side markets were exploited for an estimated $700,000 through manipulation of the oracle value assigned to Beets LP collateral. The attacker changed the pool token ratio to inflate the reported LP value, borrowed against the overpriced collateral, then reversed the swap, leaving bad debt; the affected markets were paused.
How it happened
- The attacker made a large swap that changed the underlying token ratio in a Beets LP pool.
- Vicuna’s LP oracle summed the underlying balances and temporarily overvalued the LP token.
- The attacker deposited the overpriced LP tokens as collateral.
- The attacker borrowed assets against that inflated collateral.
- The attacker reversed the swap, restoring the pool ratio but leaving Vicuna with bad debt; administrators paused the affected markets.
Protocol details
Classification
Borrowing and Lending / Oracle Manipulation
Protocol Type
Exploit/Oracle Issue
Implementation language
Solidity
Protocol links
Website
@VicunaFinance
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
