WhalebitOracleManipulation exploit analysis
Whalebit's collateral liquidation priced a thin LP pool that the attacker had flash-loaned and manipulated. DeFiHackLabs reconstructs the in-tx borrow-and-drain against the on-chain price.
- Reported loss
- 824K USD, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-03-31: Algebra Spot Price Oracle Manipulation on WhalebitOracleManipulation”.
Analysis1 min read
Whalebit's collateral liquidation priced the collateral against a thin LP pool that the attacker flash-loaned and manipulated. The attacker borrowed against the inflated collateral price, then walked the borrowed balance out.
DeFiHackLabs reconstructs the sequence against the live state; total loss is captured in the PoC.
What would have prevented it: a TWAP-protected oracle with a minimum update window, so a flash cannot reset the working price used in liquidation.
Other exploits
- SubQuerySettings exploit analysis 12 Apr 2026
- SquidMulticallAllowanceDrain exploit analysis 7 Apr 2026
- PerpPair exploit analysis 5 Apr 2026
- VTSwapHook exploit analysis 28 Mar 2026
- EST Token exploit analysis 27 Mar 2026
- Univ3CollateralToken exploit analysis 24 Mar 2026
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
