Cozy Finance exploit drains $160K after attacker games UMA oracle
A decentralized insurance protocol just became the latest cautionary tale in DeFi security. Cozy Finance, a platform that lets users buy coverage against failures in other crypto protocols, has confirmed the Cozy Finance exploit resulted in a loss of roughly $160,000 after an attacker manipulated a core piece of its infrastructure: the UMA Optimistic Oracle. The breach, first flagged by crypto commentator SlowMist_Team, once again puts a spotlight on how price-feed mechanisms can become the weakest link in otherwise well-designed financial protocols.
Key takeaways
- Cozy Finance reported a loss of approximately $160,000 tied to a targeted exploit.
- The attack exploited weaknesses in the UMA Optimistic Oracle, a pricing tool used across DeFi.
- An attacker submitted a false price proposal that went unchallenged, triggering compensation payouts.
- The exploit stayed hidden until after the payouts had already gone through.
- Crypto commentator SlowMist_Team publicly flagged the vulnerability, drawing wider attention to it.
Cozy Finance Suffers $160,000 Loss From UMA Oracle Exploit
The core of the incident traces back to a flaw in how the UMA Optimistic Oracle handles disputed price data. Cozy Finance reported the $160,000 loss shortly after the exploit came to light, describing it as the direct result of an attacker gaming the oracle’s verification process rather than a breach of its own smart contract code.
… Continue reading the full article at the original source below.
