shield Oracle Manipulation

NXUSD Exploit: Oracle Manipulation Incident Explained (2022)

On September 2022, NXUSD suffered a oracle manipulation — the first of 19 documented oracle manipulation incidents in our archive where the loss figure was not publicly disclosed but the exploit pattern is documented below.

Attack Mechanics: How the NXUSD Oracle Manipulation Played Out

Exploit Class Applied to NXUSD

The NXUSD incident on September 6, 2022 is classified as a Oracle Manipulation. The attacker skews the price feed the protocol trusts — often via a thin DEX pool — forcing the contract to misprice collateral. In the full archive, NXUSD is 1 of 19 documented oracle manipulation incidents.

NXUSD in Context

The NXUSD incident joins a class whose largest loss to date is – BonqDAO (2023) at $88M.

Prior Oracle Manipulation Before NXUSD

The nearest oracle manipulation incident before NXUSD was InverseFinance, 82 days earlier on June 16, 2022. The same exploit class surfaced again within the oracle manipulation attack surface.

NXUSD Vulnerability Signature

The primary source categorises the NXUSD exploit specifically as “flashloan price oracle manipulation”. This narrower label is entity-specific: it reflects how the NXUSD contract failed, rather than the broad oracle manipulation pattern alone.

Impact & Recovery for NXUSD

NXUSD Loss Figure

The loss figure for NXUSD is not publicly disclosed. The primary source reports the exploit in non-USD terms, so no USD estimate is published here. For reference, the average loss across 19 oracle manipulation incidents in our archive is $9.69M.

Timeline Since the NXUSD Incident

The NXUSD exploit occurred 3.6 years ago (1,316 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for NXUSD

Public post-mortem / on-chain analysis for the NXUSD incident: view source.

FAQ

How much did NXUSD lose?

The NXUSD loss figure is not publicly disclosed. The primary source reports the exploit in non-USD token terms, so no USD estimate is published here.

When did the NXUSD hack happen?

The NXUSD exploit was recorded on September 6, 2022 — 1,316 days ago.

What type of exploit hit NXUSD?

The NXUSD incident is classified as a Oracle Manipulation. The attacker skews the price feed the protocol trusts — often via a thin DEX pool — forcing the contract to misprice collateral.

How common is the Oracle Manipulation pattern seen at NXUSD?

Our archive contains 19 documented oracle manipulation incidents. The NXUSD incident is one of them.

How does NXUSD compare to the largest Oracle Manipulation attack?

The largest oracle manipulation incident in our archive is – BonqDAO (2023) at $88M. The NXUSD loss was not publicly disclosed.

How do nodes contribute to the blockchain network?

Nodes participate in distributing and validating transactions and maintain a full copy of the blockchain.

What future advancements are necessary for DAG-based platforms according to the document?

They need to evolve in feature set to reach the same level of programmability as blockchain platforms.