Nostra Money Market exploit — $3.5M lost on Starknet
Nostra Money Market lost an estimated $3.5M on Starknet (spot price manipulation), according to the DeFiLlama hacks database. Users and integrators should review exposure and follow the project's official channels.
Vuln-watch · relayed from the DeFiLlama hacks database; see Source & attribution below
Summary
Nostra Money Market lost an estimated $3.5M on Starknet (spot price manipulation), according to the DeFiLlama hacks database. Users and integrators should review exposure and follow the project's official channels.
Incident
- Protocol: Nostra Money Market
- Date (UTC): 2026-09-17
- Estimated loss: $3.5M
- Chain(s): Starknet
- Technique: Spot Price Manipulation
- Classification: Oracle Manipulation
- Target: DeFi Protocol
Recommended actions
- Revoke token approvals granted to Nostra Money Market contracts until the project confirms they are safe
- Integrators: pause or delist affected assets and monitor for attacker fund movements
- Beware of follow-on phishing: ignore unofficial "refund", "recovery", or "claim" links and DMs; use the project's verified channels only
Source & attribution
This 0xCERT advisory relays an incident recorded in the DeFiLlama hacks database (https://defillama.com/hacks). Figures are preliminary estimates and may be revised; refer to the project's own post-mortem for the authoritative record. Report additional details to 0xCERT at https://www.0xcert.com/report.
Indicators of compromise
All IOC feeds →- address0x06d48ef7ab62c26e3ef1987c322096cd508e9034c82048783a6b438fc1344bc3Attacker borrow account (CertiK, GoPlus) · Starknet
- address0xa059aaab82773caf622de9d9a0f2dbf9aa7f3c37Attacker consolidation address for bridged funds (CertiK) · Ethereum
- tx0x2460fde607d09f2434d1b4e6d4089c6e1f459f4ce70ba2853d3a37547cdf00eBorrow at inflated NSTR valuation (Phalcon) · Starknet
- tx0x6bc9b41bce2b6c08639c16790af064efafa15890c1ebf8cc72df99a577a1cf1Manipulated GeckoTerminal oracle price entry (Phalcon) · Starknet
- tx0x741af6efcc55165e89f7ef0b8ebad7e87efeaa8daa3b60dddd62d5dcacae69dAttacker NSTR/SolvBTC pool creation, one-sided liquidity (Phalcon) · Starknet
- tx0x772e73613ffbc845508377fc6ded1137f60ad730aecb2b7c18a2978a84a6ac1Price-moving buy in manipulated pool (Phalcon) · Starknet
OpenPGP-signed. The signed text of this advisory verifies against the 0xCERT key CCC7 D9EC 9415 723D.
Published 2026-09-17 · last updated 2026-10-08
curl -s https://www.0xcert.com/pgp.asc | gpg --import && curl -s https://www.0xcert.com/advisory/0xCERT-2026-0160/signed.txt | gpg --verify