Incident case file
Sign in to watchCurve LlamaLend sDOLA Market — Oracle Manipulation / Donation Attack
Incident date March 2, 2026
0 views
ResolvedEthereumOracle manipulationCluster: CURVE-ETH-2026-03
Estimated loss
$240K
Victims identified
more than ten victims identified
Victim group joining is coming soon.
Investigation
85%
Facts and investigation
Attacker: 0x33a0aab2642c78729873786e5903cc30f9a94be2
Funds moved to: Tornado Cash
TODO
Timeline: Attacker opened a leveraged position on Curve LlamaLend sDOLA market, donated tokens to manipulate the sDOLA oracle price, triggering forced liquidations of multiple positions. Used a flash loan to amplify the attack, repaid the flash loan after liquidations completed, and moved profits through Tornado Cash to break the transaction trail. The protocol was subsequently patched.
Sources and coverage
- Articlesmartcontractshacking.comhttps://smartcontractshacking.com/hacks/curve-lend-hack-2026
- Articledefillama.comhttps://defillama.com/protocol/curve-llamalend
- Articlechaincatcher.comhttps://www.chaincatcher.com/en/article/2249036
- Articlemexc.comhttps://www.mexc.com/news/840583
- Articleblocksec.comhttps://blocksec.com/blog/weekly-web3-security-incident-roundup-mar-2-mar-8-2026
Victim testimonies
No testimonies yet.
+ Add my testimony → (coming soon)