Pragma Classified Price Feeds Critical After Nostra Exploit
Six oracle price feeds were flagged as critical risk following a $3.5 million exploit on the Nostra lending protocol.
Updated on Sept. 22, 2026 in Cybersecurity
Live Poll
Do you trust decentralized lending protocols to protect your deposited funds from exploits?
Pragma identified significant vulnerabilities in six oracle price feeds after an attacker manipulated an on-chain pool to exploit the Nostra lending protocol on Starknet. The incident resulted in the unauthorized borrowing of approximately $3.5 million against NSTR collateral.
Why it matters
The exploit highlights the dangers of thin market liquidity, which prevents collateral from being liquidated at quoted prices. Manipulated oracle inputs can allow attackers to drain protocols when underlying market dependencies are not properly isolated.
Pragma observed sell-quote deterioration ranging from 15% to 22% for tokens tested with $10,000 quantities. Six feeds were rated critical risk, while nine additional feeds were labeled high risk.
The players
Pragma
Pragma is a blockchain oracle provider that manages price feeds for various decentralized finance protocols.
Nostra
Nostra is a decentralized lending protocol operating on the Starknet network.
Starknet
Starknet is a validity-rollup, or ZK-rollup, that acts as a layer-2 scaling solution for Ethereum.
The details
The attacker successfully altered the NSTR oracle price by manipulating an on-chain pool, a maneuver that would have been blocked by an enforced three-source minimum for oracle responses. In response to the breach, Nostra paused all lending, borrowing, withdrawals, and liquidations across the network.
Timeline
September 17, 2026: An exploit occurred at the Nostra lending protocol.
September 18, 2026: Pragma released a critical risk assessment for six oracle price feeds.
The Tech Race
This incident underscores the ongoing challenge of oracle security as DeFi protocols transition from centralized data feeds to more robust, multi-source verification systems. It illustrates how automated safety triggers act as a necessary defense layer against sophisticated price manipulation.
Users of the Nostra protocol currently face restricted access to their funds as lending, borrowing, and withdrawals remain paused. Investors should be aware that the protocol has identified critical vulnerabilities in specific price feeds, which could influence future collateral management.
The takeaway
Protocol developers should prioritize decentralized oracle configurations that enforce multi-source validation to mitigate price manipulation risks. Users should monitor official protocol updates regarding the status of paused funds and recovery efforts.
Further reading
For more background on digital asset security, explore the Cybersecurity section.
Live Poll
Do you trust decentralized lending protocols to protect your deposited funds from exploits?
