{"id":13540,"date":"2026-09-22T01:12:57","date_gmt":"2026-09-22T01:12:57","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=13540"},"modified":"2026-09-22T01:12:57","modified_gmt":"2026-09-22T01:12:57","slug":"pragma-flags-6-price-feeds-as-critical-risk-following-3-5m-starknet-lending-exploit","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=13540","title":{"rendered":"Pragma flags 6 price feeds as critical risk following $3.5M Starknet lending exploit"},"content":{"rendered":"<p><\/p>\n<div data-cs-editorial-figure-scope=\"\" data-cs-editorial-quote-scope=\"\" data-cs-image-viewer-scope=\"\" data-single-article-content=\"\">\n<p>Oracle provider Pragma classified 6 of 22 mainnet market and rate feeds as critical risk in a Sept. 18 assessment, warning lenders that an available token price does not establish that collateral can be sold to cover a loan.<\/p>\n<p>The liquidity report followed a Sept. 17 borrowing exploit at Nostra, a lending protocol on Starknet. Nostra\u2019s account reported that a manipulated NSTR oracle price allowed one account to borrow approximately $3.5 million of other assets against NSTR collateral.<\/p>\n<p>Pragma placed BROTHER, DAI, DOG, EKUBO, LORDS and NSTR in its critical category, with nine other feeds rated high risk. The assessment does not establish that every listed feed is used as collateral.<\/p>\n<h2>Why an oracle price is not enough<\/h2>\n<p>An oracle supplies a valuation. Liquidation requires selling collateral, and a thin market may not absorb that sale near the quoted price. A loan can be backed by an apparent value that cannot be realized when repayment depends on selling the token.<\/p>\n<p>At token quantities valued by the oracle at $10,000, sell-quote deterioration was about 15% for NSTR, 17% for EKUBO, 22% for LORDS, and 20% for BROTHER, measured against quotes for $10 sales.<\/p>\n<figure id=\"attachment_564706\" aria-describedby=\"caption-attachment-564706\" style=\"width: 720px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" loading=\"lazy\" decoding=\"async\" class=\"wp-image-564706\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2a05c1b0-12ae-4b05-91ed-af142727d8cb.png\" alt=\"Pragma September 18 snapshot: indicative sell-quote deterioration for $10,000 oracle-sized token quantities versus $10 sales, approximately NSTR 15%, EKUBO 17%, LORDS 22% and BROTHER 20%. Quotes were not executed.\" width=\"720\" height=\"900\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2a05c1b0-12ae-4b05-91ed-af142727d8cb.png 1122w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2a05c1b0-12ae-4b05-91ed-af142727d8cb-240x300.png 240w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2a05c1b0-12ae-4b05-91ed-af142727d8cb-819x1024.png 819w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2a05c1b0-12ae-4b05-91ed-af142727d8cb-768x960.png 768w\" sizes=\"auto, (max-width: 720px) 100vw, 720px\"\/><img loading=\"lazy\" loading=\"lazy\" decoding=\"async\" class=\"lazyload wp-image-564706\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2a05c1b0-12ae-4b05-91ed-af142727d8cb.png\" alt=\"Pragma September 18 snapshot: indicative sell-quote deterioration for $10,000 oracle-sized token quantities versus $10 sales, approximately NSTR 15%, EKUBO 17%, LORDS 22% and BROTHER 20%. Quotes were not executed.\" width=\"720\" height=\"900\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2a05c1b0-12ae-4b05-91ed-af142727d8cb.png 1122w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2a05c1b0-12ae-4b05-91ed-af142727d8cb-240x300.png 240w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2a05c1b0-12ae-4b05-91ed-af142727d8cb-819x1024.png 819w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/09\/exec-2a05c1b0-12ae-4b05-91ed-af142727d8cb-768x960.png 768w\" data-sizes=\"(max-width: 720px) 100vw, 720px\"\/><figcaption id=\"caption-attachment-564706\" class=\"wp-caption-text\">Pragma\u2019s Sept. 18 snapshot showed indicative $10,000 sell quotes deteriorating 15% to 22% versus $10 quotes across four tokens.<\/figcaption><\/figure>\n<p>The DAI finding concerns source concentration and tested Starknet token routes. Current and legacy deployments had different exit curves, so the critical rating cannot be read as a finding that DAI is globally illiquid.<\/p>\n<aside id=\"cs-inline-newsletter-1\" class=\"cs-inline-newsletter\" data-inline-newsletter=\"\" data-newsletter-placement=\"article-midpoint\" data-newsletter-pending-label=\"Joining\u2026\" data-newsletter-pending-status=\"Joining The Catalyst\u2026\" data-newsletter-email-required-message=\"Before sending, please provide your email address.\" aria-labelledby=\"cs-inline-newsletter-1-title\" aria-describedby=\"cs-inline-newsletter-1-copy\">\n<div class=\"cs-inline-newsletter__inner\">\n<div class=\"cs-inline-newsletter__content\"> <span class=\"cs-inline-newsletter__eyebrow\"> <i class=\"fa-regular fa-envelope\" aria-hidden=\"true\"\/> The Catalyst <\/span><\/p>\n<h2 id=\"cs-inline-newsletter-1-title\" class=\"cs-inline-newsletter__title\">What\u2019s moving crypto. Why it matters.<\/h2>\n<p id=\"cs-inline-newsletter-1-copy\" class=\"cs-inline-newsletter__copy\">Get CryptoSlate\u2019s essential stories and what to watch next.<\/p>\n<p>  <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"16\" fill=\"currentColor\" viewbox=\"0 0 16 16\" aria-hidden=\"true\" focusable=\"false\"> <path d=\"M15 3.604H1v1.891h14v-1.89ZM1 7.208V16l7-3.926L15 16V7.208zM15 0H1v1.89h14z\"\/> <\/svg> <span>Published on Substack<\/span> <\/div>\n<div class=\"cs-inline-newsletter__form-shell\">\n<p id=\"cs-inline-newsletter-1-privacy\" class=\"cs-inline-newsletter__privacy\">Seven days a week. Unsubscribe anytime.<\/p>\n<p> <i class=\"fa-regular fa-circle-xmark\" aria-hidden=\"true\"\/> <span>Whoops, looks like there was a problem. Please try again.<\/span><\/p>\n<div class=\"cs-inline-newsletter__success\" role=\"status\" aria-live=\"polite\" aria-atomic=\"true\" tabindex=\"-1\"> <span class=\"cs-inline-newsletter__success-icon\" aria-hidden=\"true\"\/><\/p>\n<div>\n<h3 class=\"cs-inline-newsletter__success-title\">Check your inbox.<\/h3>\n<p class=\"cs-inline-newsletter__success-copy\">Your signup request was sent. If confirmation is required, follow the email from Substack.<\/p>\n<p class=\"cs-inline-newsletter__success-hint\">Look in spam or promotions if you don\u2019t see it.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/aside>\n<p>Multiple source labels also don&#8217;t necessarily solve the problem. Pragma warns that publishers and aggregators can share underlying market dependencies, so several labels may reflect overlapping liquidity.<\/p>\n<div class=\"cs-article-embed\">\n<p> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">How tokenized stocks fail as collateral even when the stock price does not move<\/h3>\n<\/p>\n<p> <span class=\"cs-article-embed__arrow\" aria-hidden=\"true\"> <i class=\"fa-light fa-arrow-up-right\"\/> <\/span> <\/div>\n<p>In its Sept. 17 incident account, Pragma said the affected oracle response had two contributing sources. The provider said an enforced three-source minimum would have rejected it, and its integration guidance also recommends freshness checks and thresholds suited to the asset\u2019s risk.<\/p>\n<p>Rejecting that response would be a separate safeguard from ensuring collateral has adequate sale liquidity.<\/p>\n<p>Pragma attributed the deviating input to a manipulated on-chain pool and said its reconstruction found no decimals or median-calculation error.<\/p>\n<p>For depositors, the immediate consequence was restricted access. In its Sept. 17 statement, Nostra said it paused lending, borrowing, withdrawals, and liquidations while it reconciled the impact and traced funds. It said final losses and potential recoveries were still unknown.<\/p>\n<p>The Sept. 17 announcement leaves the subsequent status of withdrawals and recovery unconfirmed.<\/p>\n<p>In its update that day, Pragma separately reported that the attacker\u2019s address had been frozen and recovery work was ongoing.<\/p>\n<p>The report leaves lenders with a decision beyond whether a feed exists: which assets qualify as collateral, how much exposure to allow, and whether their exit liquidity can support liquidation. Publishing a price doesn&#8217;t settle any of those questions by itself.<\/p>\n<\/div>\n<p>DeFi,Featured,Hacks,Outage#Pragma #flags #price #feeds #critical #risk #3.5M #Starknet #lending #exploit1790039577<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Oracle provider Pragma classified 6 of 22 mainnet market and rate feeds as critical risk in a Sept. 18 assessment, warning lenders that an available token price does not establish that collateral can be sold to cover a loan. The liquidity report followed a Sept. 17 borrowing exploit at Nostra, a lending protocol on Starknet.<\/p>\n","protected":false},"author":1,"featured_media":13541,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[7055,158,664,2434,498,1176,7054,49,160,1281],"class_list":["post-13540","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ethereum","tag-3-5m","tag-critical","tag-exploit","tag-feeds","tag-flags","tag-lending","tag-pragma","tag-price","tag-risk","tag-starknet"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Pragma flags 6 price feeds as critical risk following $3.5M Starknet lending exploit - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"description\" content=\"The Sept. 18 assessment exposes a gap between oracle valuations and the liquidity lenders need to sell collateral.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=13540\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pragma flags 6 price feeds as critical risk following $3.5M Starknet lending exploit\" \/>\n<meta property=\"og:description\" content=\"The Sept. 18 assessment exposes a gap between oracle valuations and the liquidity lenders need to sell collateral.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=13540\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-22T01:12:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/oracle-price-exit-liquidity-standard-image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13540\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=13540\",\"name\":\"Pragma flags 6 price feeds as critical risk following $3.5M Starknet lending exploit - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13540#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13540#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/oracle-price-exit-liquidity-standard-image.jpg\",\"datePublished\":\"2026-09-22T01:12:57+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"description\":\"The Sept. 18 assessment exposes a gap between oracle valuations and the liquidity lenders need to sell collateral.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13540#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=13540\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13540#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/oracle-price-exit-liquidity-standard-image.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/oracle-price-exit-liquidity-standard-image.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=13540#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pragma flags 6 price feeds as critical risk following $3.5M Starknet lending exploit\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Pragma flags 6 price feeds as critical risk following $3.5M Starknet lending exploit - Crypto News: Latest Cryptocurrency News and Analysis","description":"The Sept. 18 assessment exposes a gap between oracle valuations and the liquidity lenders need to sell collateral.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=13540","og_locale":"en_US","og_type":"article","og_title":"Pragma flags 6 price feeds as critical risk following $3.5M Starknet lending exploit","og_description":"The Sept. 18 assessment exposes a gap between oracle valuations and the liquidity lenders need to sell collateral.","og_url":"https:\/\/cryptonews.uk.com\/?p=13540","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-09-22T01:12:57+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/oracle-price-exit-liquidity-standard-image.jpg","type":"image\/jpeg"}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=13540","url":"https:\/\/cryptonews.uk.com\/?p=13540","name":"Pragma flags 6 price feeds as critical risk following $3.5M Starknet lending exploit - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=13540#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=13540#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/oracle-price-exit-liquidity-standard-image.jpg","datePublished":"2026-09-22T01:12:57+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"description":"The Sept. 18 assessment exposes a gap between oracle valuations and the liquidity lenders need to sell collateral.","breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=13540#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=13540"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=13540#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/oracle-price-exit-liquidity-standard-image.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/09\/oracle-price-exit-liquidity-standard-image.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=13540#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Pragma flags 6 price feeds as critical risk following $3.5M Starknet lending exploit"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/13540","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=13540"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/13540\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/13541"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=13540"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=13540"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=13540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}