Papertrade protocol loses $1.28M to BBO oracle manipulation attack within 8 hours of HyperEVM launch.
Security & Exploits ·
Papertrade protocol suffered a loss of approximately $1.28 million following a price oracle manipulation attack that occurred within eight hours of the HyperEVM launch. The exploit targeted the BBO oracle mechanism used by the protocol to source price data for its operations.
Oracle attacks exploit the dependency of smart contracts on external data feeds to execute trades and manage collateral. When oracle mechanisms lack sufficient decentralization or validation layers, malicious actors can manipulate reported prices to trigger unintended contract behavior—such as forced liquidations or artificially favorable trades. The speed of this attack, occurring so shortly after HyperEVM's deployment, suggests the protocol may not have had robust safeguards in place during its initial launch phase.
The incident remains part of a broader pattern of oracle-related vulnerabilities in DeFi protocols. It is unclear whether the attack exploited a flaw specific to Papertrade's implementation, whether the underlying oracle provider had weaknesses, or what remediation measures have been implemented to prevent recurrence. Further details about the attacker's methods and whether stolen funds were recovered are not yet available.