A lending pool operated by YieldBlox on the Stellar blockchain was emptied of around $10.2&nbsp;million in an <button class="define-target" id="oracle-manipulation">oracle manipulation</button> attack on the Reflector <button class="define-target" id="oracle">oracle</button> supplying prices for the USTRY/USDC market. Reflector has said that there was no flaw with their oracle, and that market illiquidity caused the problem. "Reflector quoted correct prices. ...  but it's impossible to quote adequate prices for a market fully handled by a single market-maker with almost zero trading activity."<p>The attacker was able to manipulate the oracle price to show that USTRY was priced at $100 (rather than its actual trading price of around $1.05). Then, they borrowed against the overvalued asset, withdrawing XLM and USDC priced at $10.2&nbsp;million. However, around 48&nbsp;million of the stolen XLM (~$7.2&nbsp;million) were <button class="define-target" id="freeze">frozen</button>.</p>

Archived tweet

Tweet thread by Reflector: