Starknet lending protocol Nostra paused its money market on Thursday after a manipulated price oracle let one account borrow roughly $3.5 million against NSTR collateral.
Lending, borrowing, withdrawals, and liquidations remain unavailable while the team reconciles each asset. Recovery prospects remain unclear for now.
Sponsored
Sponsored
Nostra Halts Money Market in Septembers Latest Oracle Exploit
Nostra (NSTR) carries a market value of $546,751, according to BeInCrypto Markets data. A token that small needs little capital to move.
Follow us on X to get the latest news as it happens
Nostra (NSTR) Price Performance. Source: BeInCrypto Markets
The account pledged NSTR and drew Ethereum (ETH), Starknet (STRK), USDC, USDT, Wrapped Bitcoin (WBTC), and DAIv1. The haul exceeded the collateral tokens entire market value by roughly six times.
Security firm PeckShield reported that the account bridged $1.92 million to Ethereum. That transfer included 234.57 ETH and 1.3 million DAI.
Deposits collapsed afterward. Total value locked in the protocol fell from about $4 million on September 16 to roughly $710,632 at press time per DefiLlama.
Sponsored
Sponsored
Starknets Second Oracle Failure in Two Weeks
Nostra is not the only Starknet protocol hit this month. On September 4, an incorrect price from Pragmas publishing pipeline was published across several Starknet feeds.
This triggered 47 liquidations across 42 borrower wallets on money market Vesu. Pragma reported 95% asset recovery in a September 13 update.
However, the two incidents differ in cause. Pragmas case came from a publishing fault, while Nostra faced deliberate manipulation of a collateral price.
Meanwhile, Nostra is still counting the damage.
“We are reconciling the impact on each asset and tracing the funds. The final loss and potential recoveries are not yet known,” Nostra said.
The team also warned users about impersonators. Nostra said it will never send direct messages or ask holders to connect a wallet during recovery.
September has been costly for the sector. DefiLlama had logged more than $326 million in crypto losses this month before the Nostra incident. Most of that stems from the $320 million Liquid Network incident.
The pattern has held all year. PeckShield counted 50 hacks in August, the highest monthly tally of 2026, even as losses dropped 49.5% to $136.3 million. Nostra fits that shape of frequent, smaller thefts.