Incident case file
Sign in to watchCurve LlamaLend sDOLA Market — Oracle Manipulation / Donation Attack
Incident date 2026-03-02
0 views
ResolvedEthereumOracle manipulationCluster: CURVE-ETH-2026-03
Estimated loss
$240K
Victims identified
more than ten victims identified
Victim group joining is coming soon.
Investigation
85%
Facts and investigation
Ledger
Attacker
0x33a0aab2642c78729873786e5903cc30f9a94be2
Funds moved to
Tornado Cash
Linked
TODO
Chronology
1 beatAttacker opened a leveraged position on Curve LlamaLend sDOLA market, donated tokens to manipulate the sDOLA oracle price, triggering forced liquidations of multiple positions. Used a flash loan to amplify the attack, repaid the flash loan after liquidations completed, and moved profits through Tornado Cash to break the transaction trail. The protocol was subsequently patched.
Sources and coverage
- Articlesmartcontractshacking.comhttps://smartcontractshacking.com/hacks/curve-lend-hack-2026
- Articledefillama.comhttps://defillama.com/protocol/curve-llamalend
- Articlechaincatcher.comhttps://www.chaincatcher.com/en/article/2249036
- Articlemexc.comhttps://www.mexc.com/news/840583
- Articleblocksec.comhttps://blocksec.com/blog/weekly-web3-security-incident-roundup-mar-2-mar-8-2026
Victim testimonies
No testimonies yet.
+ Add my testimony → (coming soon)