Resupply
June 25, 2025
Price oracle manipulation allowed attacker to drain liquidity pools catastrophically.
FORENSIC REPORT
Time of death: June 25, 2025. The specimen, identified as Resupply protocol on the Ethereum chain, was found in a state of severe exsanguination at the time of discovery. The attack occurred through a methodical exploitation of the protocol's price oracle mechanism—the very sensory system meant to keep it alive. By the time security researchers documented the event, approximately $9.6 million in user assets had migrated into unauthorized wallets.
Cause of death analysis: The autopsy reveals a catastrophic failure in oracle integrity. The attacker manipulated price feed data, likely through flash loan attacks or by poisoning liquidity sources that the protocol relied upon for accurate asset pricing. This allowed them to execute transactions at artificially favorable rates—liquidating positions that should never have been liquidatable, withdrawing collateral that should have been locked. The protocol's smart contracts, executing their instructions with mechanical precision, became the very instruments of their own demise. There is no mercy in code; only execution.
Contributing factors: Preliminary investigation suggests the oracle implementation lacked sufficient redundancy or safeguards against price manipulation. The protocol appears to have relied on a single or inadequately diversified price source. Warning signs are visible in retrospect—the architecture shows all the classic symptoms of oracle neglect. No circuit breakers. No time-weighted average prices. No pause mechanisms. Just pure, trusting faith in a data stream that could be poisoned.
Victim impact: Users and liquidity providers suffered complete loss of deposited assets totaling $9.6 million. The specimen's native token experienced the predictable post-mortem market collapse, erasing confidence and liquidating whatever remained of the project's credibility.
Pathologist's note: This is oracle manipulation in its purest, most elegant form. The attacker didn't need to break the code—they simply fed it lies and watched it follow orders to its own grave. Resupply joins the vast cemetery of protocols that learned too late that in DeFi, a chain is only as strong as its weakest data source. We've catalogued approximately four hundred similar cases. The bodies pile up faster than the ecosystem learns.
"Resupply's oracle infrastructure failed spectacularly on June 25, 2025, allowing a sophisticated attacker to manipulate price feeds and extract $9.6M in assets. Another day, another decimated protocol."
Data from DefiLlama