Enso Finance DPI Strategy Vault exploited for ~5.6 ETH due to oracle price calculation error.
Security & Exploits ·
An oracle price calculation error in Enso Finance's DPI Strategy Vault enabled an exploit resulting in approximately 5.6 ETH in losses. The vulnerability stemmed from a flaw in the EnsoOracle's valuation chain that produced an incorrectly narrow time-weighted average price window, allowing an attacker to exploit an imbalanced Uniswap v3 pool by swapping tokens at a near-spot rate while the oracle valued them at roughly 9.2 times the actual price, resulting in excessive share minting and redemption for profit.