The attacker appeared to exploit a vulnerability in the platform's price oracle system.

The $7.5 million exploit on KiloEx was executed by an attacker who manipulated KiloEx’s price oracle system using a permissionless function to open and close trades at artificial prices for profit.