Oracle Manipulation Vulnerability
Oracle manipulation vulnerability occurs when a malicious actor artificially alters the price data reported by a decentralized oracle to a smart contract. Decentralized finance protocols often rely on these oracles to determine the value of assets for lending, borrowing, or derivative pricing.
If an attacker can influence the underlying price feed, they can force the protocol to execute trades or liquidations at incorrect, unfavorable prices. This often involves executing large trades on a thin liquidity pool to skew the spot price before the oracle updates.
Because the smart contract blindly trusts the oracle data, it performs actions based on this manipulated information, allowing the attacker to extract value from the protocol. This is a critical risk in DeFi, as it targets the bridge between external market data and on-chain logic.
Effective mitigation requires using time-weighted average prices or decentralized oracle networks that aggregate data from multiple sources.