Flash Loan Oracle Manipulation
Flash loan oracle manipulation occurs when an attacker uses a massive, short-term uncollateralized loan to artificially distort the price of an asset on a decentralized exchange. Because the loan is borrowed and repaid within a single transaction, the attacker can use the borrowed capital to push the price of an asset to an extreme level, triggering incorrect pricing in downstream protocols that rely on that exchange for price data.
This allows the attacker to execute trades, borrow assets, or trigger liquidations at highly favorable, manipulated rates before the price corrects itself. This vulnerability highlights the reliance of many DeFi protocols on centralized or thin-liquidity on-chain price feeds.
It demonstrates a critical weakness in protocols that do not use time-weighted average prices or decentralized oracle networks to smooth out volatility. By exploiting the instantaneous nature of blockchain settlement, the attacker effectively steals value from the protocol's reserves.
Mitigating this requires integrating robust, multi-source price oracles that are resistant to short-term volume spikes.