defirisk.co
rubric v1.7.0

Levana Protocol: Oracle Price Delta Manipulation (Timing + Network Congestion)

Levana Protocol lost $1.1M — 10% of LP liquidity — to a 14-day stealth attack that exploited timing gaps in oracle updates, with the biggest losses coming when a Cosmos network congestion bug (and a DDoS) gave the attacker uninterrupted windows to make loaded leveraged bets.

Occurred 2023-12-13 Loss $1M Status closed

Summary #

Levana Protocol suffered a Perpetuals / Derivatives on 2023-12-13, resulting in a loss of approximately $1M.

What happened #

Levana Protocol lost $1.1M — 10% of LP liquidity — to a 14-day stealth attack that exploited timing gaps in oracle updates, with the biggest losses coming when a Cosmos network congestion bug (and a DDoS) gave the attacker uninterrupted windows to make loaded leveraged bets.

Linked factors #

  • RD-F-007 — related : Bug bounty absent — baseline integrity gap [via dashboard_risk_factors/Bug bounty: Unknown]
  • RD-F-099 — illustrative : Oracle price deviation > X% from secondary source — RT signal would have fired [via realtime_signals/Oracle anomaly (Y/N): Y — oracle update lag windows exploited; detectable in retrospect]
  • RD-F-126 — causal : Is-a-fork-of (Cat 8 anchor) [via dashboard_risk_factors/Forked?: Original protocol (not a fork)]