A Faulty Pragma Price Feed Liquidated $3 Million of Collateral on Starknet in Two Minutes

Vesu, a lending protocol on the Starknet layer-2 network, said an upstream price source operated by the oracle provider Pragma delivered incorrect data for about two minutes on 4 September. During that window the wrong prices reached several Vesu liquidity pools and made 47 borrowing positions appear eligible for liquidation. Automated liquidator bots took roughly $3 million of collateral before the feed returned to the correct value.

Vesu's assessment is that no contract behaved incorrectly. The liquidation engine executed exactly as written, on inputs that were wrong. The protocol says it is coordinating with Pragma, StarkWare, the Starknet Foundation and the curators of the affected pools to recover the seized assets. It has not said how much is recoverable, how the recovery would work, or whether any liquidator has agreed to return anything. Liquidators who acted through open, permissionless functions have no obligation to give the collateral back.

The pattern repeats. Aave suffered a comparable failure in March, when a stale parameter triggered an estimated $26 million to $27 million of unintended liquidations of wrapped staked ether, after which that protocol reviewed its oracle update rates and fallback logic. In both cases the audited on-chain code was fine and the loss came through a privileged input the protocol trusts by design.

Starknet holds $403.7 million of total value secured, up 7.5% over seven days according to L2Beat, so a $3 million forced liquidation is a meaningful share of the collateral on that network. The incident also raises a governance question. Recovery depends on social coordination among a foundation, an oracle firm and pool curators, which is a reminder of how much of a nominally trustless system runs on identifiable parties agreeing to act.