BlockSec: Ploutus suffers $390,000 loss due to oracle misconfiguration, attacker borrows 187 ETH with just 8 USDC

Foresight News reported, according to monitoring by BlockSec, that the liquidity pool of the Ploutus protocol on Ethereum suffered a loss of approximately $390,000 due to an oracle configuration error. The oracle was mistakenly set to use the BTC/USD Chainlink price feed to price USDC, resulting in a severe pricing deviation. The attacker exploited this error and was able to borrow 187 ETH with only 8 USDC as collateral.

BlockSec stated that it is noteworthy that the exploit was executed in block 24538897, immediately after the configuration error transaction was confirmed in block 24538896, indicating that the attacker closely monitored and took advantage of the configuration change.