Vicuna Hack

On March 28, 2025, Vicuna Finance was exploited via an oracle manipulation attack, leading to a loss of approximately $700K. Only the S Market and Stablecoin Market were affected, while the Main Protocol remains safe and operational.

The attack targeted oracle price feeds used in Vicuna’s S Market and Stablecoin Market. By manipulating price data, the attacker was able to unfairly borrow and drain funds from the protocol. This caused about 40% of total funds in affected markets to be lost.

In response, Vicuna is redistributing remaining assets to users based on net supply positions between two snapshot points. While Gems and point farming on Sonic have been revoked, users will be able to review and claim funds via a dedicated claim page, with support provided for disputes.