ploutus

The Ploutus protocol's liquidity pool on the Ethereum chain (0xD060...945D2) was attacked due to a misconfiguration of the oracle, resulting in a loss of approximately $390,000.Analysis shows that the pool incorrectly pointed the USDC price to Chainlink's BTC/USD feed, causing a significant price deviation. The attacker exploited this vulnerability, borrowing 187 ETH with only 8 USDC as collateral. On-chain data indicates that the attack transaction occurred in the next block after the configuration change was confirmed, suggesting that the attacker was monitoring in real-time and quickly took advantage of the parameter update.