REKT AUTOPSY
ALL CASES|Scan Wallet →
CASE FILE #25
ExploitEthereum

Resupply

June 25, 2025

CAUSE OF DEATH

Price oracle manipulation allowed attacker to drain liquidity pools catastrophically.

TOTAL LOST
$9.6M
CHAIN
Ethereum
TYPE
Exploit
📄

FORENSIC REPORT

TIME OF DEATH

Time of death: June 25, 2025. The specimen, identified as Resupply protocol on the Ethereum chain, was found in a state of severe exsanguination at the time of discovery. The attack occurred through a methodical exploitation of the protocol's price oracle mechanism—the very sensory system meant to keep it alive. By the time security researchers documented the event, approximately $9.6 million in user assets had migrated into unauthorized wallets.

CAUSE OF DEATH ANALYSIS

Cause of death analysis: The autopsy reveals a catastrophic failure in oracle integrity. The attacker manipulated price feed data, likely through flash loan attacks or by poisoning liquidity sources that the protocol relied upon for accurate asset pricing. This allowed them to execute transactions at artificially favorable rates—liquidating positions that should never have been liquidatable, withdrawing collateral that should have been locked. The protocol's smart contracts, executing their instructions with mechanical precision, became the very instruments of their own demise. There is no mercy in code; only execution.

CONTRIBUTING FACTORS

Contributing factors: Preliminary investigation suggests the oracle implementation lacked sufficient redundancy or safeguards against price manipulation. The protocol appears to have relied on a single or inadequately diversified price source. Warning signs are visible in retrospect—the architecture shows all the classic symptoms of oracle neglect. No circuit breakers. No time-weighted average prices. No pause mechanisms. Just pure, trusting faith in a data stream that could be poisoned.

VICTIM IMPACT

Victim impact: Users and liquidity providers suffered complete loss of deposited assets totaling $9.6 million. The specimen's native token experienced the predictable post-mortem market collapse, erasing confidence and liquidating whatever remained of the project's credibility.

PATHOLOGIST'S NOTE

Pathologist's note: This is oracle manipulation in its purest, most elegant form. The attacker didn't need to break the code—they simply fed it lies and watched it follow orders to its own grave. Resupply joins the vast cemetery of protocols that learned too late that in DeFi, a chain is only as strong as its weakest data source. We've catalogued approximately four hundred similar cases. The bodies pile up faster than the ecosystem learns.

"Resupply's oracle infrastructure failed spectacularly on June 25, 2025, allowing a sophisticated attacker to manipulate price feeds and extract $9.6M in assets. Another day, another decimated protocol."

Share on 𝕏
Were you holding this? Get your wallet autopsy →

Data from DefiLlama