Key Takeaways
- Forty-seven user positions were incorrectly liquidated on Vesu due to erroneous Pragma oracle data on September 4
- Approximately $3 million in user collateral was impacted during a brief two-minute window
- The protocol confirms its smart contracts functioned as intended with no security flaws
- Pragma has implemented a resolution and impacted liquidity pools remain temporarily paused
- Collaborative recovery initiatives involving Starknet partners are in progress for impacted users
On September 4, 2026, the Starknet-based lending platform Vesu experienced an oracle-related incident that resulted in the improper liquidation of 47 user positions, affecting roughly $3 million in collateral assets.
Update on the 4th September oracle incident
A faulty upstream Pragma price feed caused 47 positions and $3M of collateral to be irregularly liquidated across several Vesu pools between 04:08 and 04:10 UTC
The feed corrected itself within two minutes, and nothing has been…
— Vesu (@vesuxyz) September 4, 2026
The malfunction occurred within an exceptionally narrow timeframe—from 04:08 to 04:10 UTC—yet managed to create significant turmoil across multiple liquidity pools operating on the protocol.
Root Cause of the Incident
The protocol relies on Pragma, an external oracle service, to deliver accurate price information for assessing the health status of borrowing positions. When Pragma’s feed transmitted erroneous pricing data, Vesu’s automated liquidation mechanism identified 47 positions as undercollateralized and eligible for liquidation.
Automated bots executed liquidations, seizing approximately $3 million worth of collateral before the oracle data self-corrected. The pricing anomaly persisted for under two minutes before accurate market valuations resumed.
The protocol has not yet revealed which specific assets experienced pricing errors, the magnitude of price deviations from actual market rates, or the exact amount of collateral retained by liquidation bots. A comprehensive technical post-mortem is anticipated to address these questions.
Protocol Maintains Smart Contract Integrity
Vesu emphasized that its underlying smart contract infrastructure was “functioning exactly as programmed” and harbored no exploitable weaknesses. According to the team, no protocol-level patches were necessary since the liquidation system merely responded to compromised data received from the oracle provider.
Within overcollateralized lending systems, users must deposit assets exceeding the value of their borrowed funds. The protocol continuously monitors the collateral-to-debt ratio using externally sourced price information. When a compromised feed incorrectly indicates this ratio has fallen below safety thresholds, automatic liquidation procedures activate.
The team maintains that the September 4 event stemmed from corrupted input data rather than flawed contract logic.
Fund Recovery Initiatives in Motion
In response to the incident, Vesu initiated coordination efforts with Pragma, StarkWare, the Starknet Foundation, and pool curators to attempt fund recovery for affected parties.
The protocol has not disclosed what portion of the $3 million might be recoverable or whether liquidation bot operators have committed to returning seized assets. No specific reimbursement figures or timeline for repayment have been made public.
Affected users who experienced liquidations during the critical two-minute period were instructed to submit support requests through Vesu’s Discord channel. Those utilizing the Earn product were cautioned against prematurely closing positions, as doing so might jeopardize their eligibility for potential reimbursements.
Context Within DeFi Oracle Incidents
This type of oracle malfunction is not unprecedented in decentralized finance. A comparable situation affected Aave during March 2026, when an outdated parameter led to between $26 and $27 million in erroneous wstETH liquidations. Aave subsequently conducted reviews of its oracle refresh intervals and backup mechanisms.
Beyond Pragma’s implemented fix, Vesu has not disclosed any modifications to its oracle infrastructure or risk management protocols.
Blockchain-based smart contracts lack inherent capability to access external market pricing independently. They depend completely on oracle networks to gather, consolidate, and transmit price information to on-chain systems. Disruptions at any point in this data pipeline can precipitate erroneous transactions or liquidations.
The protocol indicated a detailed technical analysis will be published following the completion of its investigation.
The post Vesu Protocol Faces $3M Liquidation Crisis After Pragma Oracle Malfunction appeared first on Blockonomi.
This articles is written by : Nermeen Nabil Khear Abdelmalak
All rights reserved to : USAGOLDMIES . www.usagoldmines.com
You can Enjoy surfing our website categories and read more content in many fields you may like .
Why USAGoldMines ?
USAGoldMines is a comprehensive website offering the latest in financial, crypto, and technical news. With specialized sections for each category, it provides readers with up-to-date market insights, investment trends, and technological advancements, making it a valuable resource for investors and enthusiasts in the fast-paced financial world.