According to ME News, on September 9 (UTC+8), SlowMist monitoring revealed that the Enso Finance DPI Strategy Vault suffered a loss of approximately 5.6 ETH due to an oracle price calculation error. The root cause was a flaw in the valuation pipeline, which resulted in price estimates resembling immediate market quotes, lacking TWAP consistency checks and price range validation, compounded by an inherently imbalanced liquidity pool on Uniswap V3. Attackers exploited this vulnerability by swapping 0.683 WETH for 268.42 FARM in a single transaction on Uniswap V2; the imbalanced V3 pool incorrectly valued this transaction at 6.3 WETH—roughly 9.2 times the actual value—allowing attackers to mint excessive shares and redeem them for profit using the erroneous price. Enso responded on Twitter, stating that the affected contracts had been deprecated over four years ago, and users had previously been advised to withdraw funds via official channels such as Discord, Twitter, and GitHub. Enso’s current infrastructure does not utilize these contracts and has undergone more than 12 production-grade audits. (Source: Foresight News)
Enso Finance Vault Loses 5.6 ETH Due to Oracle Price Error
KuCoinFlashShare
Summary
A Enso Finance vault linked to the DPI strategy lost approximately 5.6 ETH due to an oracle price error caused by a flawed valuation chain. The issue involved an imbalanced Uniswap V3 pool and mispricing on V2, where an attacker swapped 0.683 WETH for 268.42 FARM. Enso stated that the affected contract had been deprecated over four years ago and is urging users to withdraw funds via official channels. The company emphasized that its current ETH infrastructure has undergone more than 12 production audits and does not utilize these outdated contracts. The incident underscores ongoing scrutiny in the crypto industry regarding DeFi oracle vulnerabilities.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.