The decentralized finance (DeFi) ecosystem is currently navigating a period of heightened volatility and systemic risk, characterized by a series of sophisticated exploits that have drained millions from prominent protocols. In September 2026 alone, total DeFi losses have surged past $333 million across 18 documented incidents en.cryptonomist.ch. These events are no longer isolated instances of simple code bugs; rather, they represent a shift toward complex, multi-stage operations involving oracle price manipulation, the exploitation of valid authorization signatures, and the weaponization of artificial intelligence as a social engineering lure. From the $3.5 million drain of Nostra Finance on Starknet to the dual-protocol hit on Fetch.ai and NuNet, the current landscape suggests that even audited smart contracts remain vulnerable to external data dependencies and credential compromises.
The Nostra Finance Incident: Anatomy of an 8,000x Oracle Spike
On September 17, 2026, the Starknet-based lending platform Nostra Finance fell victim to a highly coordinated oracle price manipulation attack that resulted in the loss of approximately $3.5 million in various crypto assets en.cryptonomist.ch. The exploit was not a sudden breach but a calculated maneuver that security researchers believe was staged over several months, with the attacker accumulating NSTR tokens as early as March and August 2026 en.cryptonomist.ch.
Mechanics of the Price Hijack
The technical core of the attack involved gaming the data aggregator GeckoTerminal to influence Nostra’s price feed. The attacker created a fake NSTR/SolvBTC liquidity pool with a minimal 1.5 SolvBTC in one-sided liquidity en.cryptonomist.ch. By wash trading within this thin pool and pulling liquidity from the market-making range, the attacker successfully manipulated the pool-selection logic of the aggregator en.cryptonomist.ch. This caused the NSTR token price to spike from a baseline of roughly $0.006 to an astronomical $49.5—an increase of approximately 8,000x en.cryptonomist.ch.
Collateral Mismatch and Asset Drainage
With the NSTR token artificially inflated, the attacker used it as collateral to borrow a wide array of liquid assets. The scale of the mismatch was profound: NSTR’s actual circulating market capitalization was estimated between $550,000 and $590,000 at the time, yet the attacker was able to borrow $3.5 million—more than five times the token's total circulating value cryptodaily.co.uk. The assets drained included ETH, STRK, USDC, USDT, WBTC, and DAI en.cryptonomist.ch.
- Immediate Response: Nostra Finance paused its money market, disabling all supply, borrow, and liquidation functions en.cryptonomist.ch.
- Fund Movement: Approximately $1.92 million of the borrowed assets, including 234.57 ETH and 1.3 million DAI, were quickly bridged to the Ethereum mainnet cryptodaily.co.uk.
- Residual Funds: While $1.9 million was consolidated on Ethereum, roughly $1.5 million reportedly remained in the original borrow account on Starknet en.cryptonomist.ch.
Fetch.ai and NuNet: The Signature-Based Breach
While Nostra was reeling from oracle manipulation, Fetch.ai and NuNet were targeted by a single attacker who utilized a different but equally effective method: the exploitation of valid authorization signatures. On September 20, 2026, a single wallet (0x1572…c362) was linked to exploits on both protocols, draining a combined $2.01 million en.cryptonomist.ch.
The Role of Valid Signatures
In the Fetch.ai incident, the attacker did not exploit a traditional code bug. Instead, they used a valid conversion-authorizer signature to call the conversionIn function on the TokenConversionManagerV3 contract en.cryptonomist.ch. This single call released the contract’s entire FET inventory, valued at approximately $1.56 million en.cryptonomist.ch. Simultaneously, the same wallet was used to mint roughly $452,000 worth of NuNet’s NTX tokens en.cryptonomist.ch.
Market Divergence and Liquidity Impact
The market reaction to these exploits highlighted the varying resilience of the two tokens. NTX experienced a catastrophic collapse, crashing over 70% in 24 hours to an all-time low of $0.000328 en.cryptonomist.ch. In contrast, FET fell only 5%, a move largely in line with a broader 4% decline in the total crypto market capitalization during the same period en.cryptonomist.ch. The attacker subsequently converted the stolen assets into 546.36 ETH (approx. $1.44 million) to obscure the trail en.cryptonomist.ch.
Haruko API Breach: Institutional Data Exposure
The risks are not confined to on-chain protocols; institutional service providers are also under fire. Haruko, a digital asset prime brokerage platform, recently disclosed a cyberattack that affected 15 clients cryptodaily.co.uk. The breach involved the extraction of an access token from process memory, allowing attackers to read exchange API details and trading data cryptodaily.co.uk.
While the exposed data was primarily read-only, some smaller hedge-fund clients reported undisclosed losses cryptodaily.co.uk. Haruko has since rotated server-side secrets and patched the vulnerability, but the incident underscores the danger of process-memory exploits in centralized infrastructure serving the crypto industry cryptodaily.co.uk.
The Rise of AI-Themed Social Engineering
Threat actors are increasingly leveraging the hype surrounding artificial intelligence to target individual investors. Two distinct campaigns have recently been identified by security firms TRM Labs and HP Wolf Security.
Fake Arbitrage Bot Tutorials
Between February and August 2026, a campaign involving fake YouTube tutorials for "AI-built arbitrage bots" tricked 224 victims into deploying malicious smart contracts thedefiant.io. Victims were directed to fake compiler sites that swapped clean code for a drainer contract. This operation resulted in the theft of 274.60 ETH, valued at approximately $517,205 thedefiant.io.
Malicious Wallet Extension Replacements
HP Wolf Security identified a campaign promoting "TradingClaw," a fake AI trading agent cryptodaily.co.uk. The malware, known as "Needle Stealer," used DLL side-loading to replace legitimate browser extensions for MetaMask, Coinbase Wallet, and Phantom with counterfeit versions designed to capture user passwords cryptodaily.co.uk.
Regulatory Shifts: CFTC No-Action Relief
Amidst these security challenges, the regulatory environment is evolving to provide more clarity for software providers. On September 17, 2026, the CFTC issued Letter 26-25, providing no-action relief for passive software providers connecting users to regulated derivatives markets cryptodaily.co.uk. This relief is contingent on providers remaining non-custodial and refraining from generating express buy/sell signals or exercising discretion over order routing cryptodaily.co.uk. This move expands upon a previous precedent set for the Phantom wallet in March 2025 cryptodaily.co.uk.
What We Don't Know
It remains unclear how the Fetch.ai attacker obtained the valid authorization signature required for the exploit, or if internal credentials were compromised. Additionally, while a portion of the Nostra Finance funds has been bridged to Ethereum, the final recovery status of the remaining $1.5 million on Starknet is unconfirmed en.cryptonomist.ch. The full extent of the losses suffered by Haruko’s hedge-fund clients also remains undisclosed to the public cryptodaily.co.uk.
The convergence of oracle vulnerabilities, credential theft, and sophisticated social engineering suggests that the DeFi sector is entering a new era of risk. As protocols like Nostra Finance and Fetch.ai work toward remediation, the broader market must grapple with the reality that technical audits alone may not be sufficient to prevent losses when external dependencies and human factors are exploited.
