Nostra (Starknet) oracle manipulation exploit (2026-09-17) — attacker addresses (rekt.news)

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Reported: 2026-10-15
  • Last updated: 2026-10-16

On 2026-09-17 a rigged thin pool fed Nostra's oracle an NSTR price ~8,306x real value, unlocking about $3.5M in borrows on Starknet; proceeds were sold on AVNU/Ekubo/JediSwap and moved via NEAR Intents to Ethereum. Source: rekt.news (https://rekt.news/nostra-rekt), citing GoPlus Security's on-chain reconstruction. Addresses: - 0x06d48ef7ab62c26e3ef1987c322096cd508e9034c82048783a6b438fc1344bc3 (Starknet; borrowing account, per GoPlus) - 0x2d9fb4edec9d5c015c43514ca5a309aab1b2638c3a45ad750d09ee971d0da23 (Starknet; thin-pool trading / price-movement account, per GoPlus) -…

Other addresses in this report: 0xa059aaab82773caf622de9d9a0f2dbf9aa7f3c37

Report a crypto scam · How to report a crypto scam