Pragma flags 6 price feeds as critical risk after 3.5M dollar Starknet exploit

Oracle provider Pragma identified 6 out of 22 mainnet market and rate feeds as critical risk in a September 18 assessment. This follows a September 17 exploit at Nostra, a Starknet lending protocol, where a manipulated NSTR oracle price enabled one account to borrow approximately 3500000 dollars against NSTR collateral. The feeds flagged include BROTHER, DAI, DOG, EKUBO, LORDS, and NSTR, with nine others rated high risk. Pragma emphasized that an oracle price does not guarantee that collateral can be sold to cover a loan, as liquidation requires selling collateral in potentially thin markets. The report noted that sell-quote deterioration for token quantities valued at 10000 dollars was about 15% for NSTR, 17% for EKUBO, 22% for LORDS, and 20% for BROTHER. The DAI finding raised concerns about source concentration and tested Starknet token routes, indicating that multiple source labels may not resolve liquidity issues. Following the incident, Nostra paused lending, borrowing, withdrawals, and liquidations while assessing the impact. The status of withdrawals and recovery remains unconfirmed, although the attacker's address has been frozen.