DeFi protocols, not oracle providers, bear primary responsibility for securing their price feeds

Overview Debates Related claims Topics Sources

Crypto holders should use offline phones instead of hardware wallets

Papertrade relies exclusively on Hyperliquid's best bid and offer (BBO) mid-price as its sole oracle source to price all open trading positions

Because Papertrade offers up to 1000x leverage, small price movements in its single Hyperliquid BBO mid-price oracle source can trigger large gains or liquidations across the platform

Single-source BBO oracle pricing creates unacceptable risk for synthetic exchanges

Papertrade prices every perpetual trade at the midpoint of Hyperliquid's current best bid and offer on HyperEVM

Papertrade's oracle pricing model creates an unacceptable vector for price manipulation

Four specific flash loan exploit types—price oracle attacks, donate-function logic exploits, reentrancy attacks, and a single $181 million governance attack—accounted for over 81% of all flash loan losses.

Protocol logic exploits accounted for 28% of flash loan losses between February 2020 and January 2022, but rose to 55% of losses between February 2022 and July 2024 as attackers shifted away from price feed manipulation.

Polymarket Protocol V2 introduces OracleAggregator, a system designed to connect to different oracles, including UMA and Chainlink, to determine market outcomes

Polymarket's OracleAggregator is a safer resolution mechanism than relying on a single oracle network

Many crypto exchanges are not collaborative enough with police investigations into theft

Crypto exchanges can offer insurance and inform users about measures in place after a theft occurs

Crypto exchanges can implement measures like wallet whitelisting, transfer waiting periods, and KYC to make theft more difficult

THORChain should block the cryptocurrency addresses linked to the Bitget hack

Seda's oracle infrastructure is used to connect the Volmex index to the Markets by Kinetiq exchange onchain for the Bitcoin Volmex Implied Volatility Index perpetual futures contract

Oracle provider Pragma attributed Nostra's September 17, 2026, $3.5 million borrowing exploit to a manipulated on-chain pool, finding no decimals or median-calculation errors in its reconstruction

Pragma warned that multiple publisher and aggregator labels may share underlying market dependencies, meaning several labels can reflect overlapping liquidity.

Pragma's September 18, 2026, assessment warned lenders that an available oracle token price does not guarantee that collateral can be successfully sold to cover a loan.

Oracle provider Pragma released a liquidity report on September 18, 2026, classifying 6 of 22 mainnet market and rate feeds as critical risk.

Trueo stated that its next-generation oracle is designed to process evidence from virtually any legitimate data source to produce fair, accurate, and credible dispute resolutions.