# September's Smaller Exploits Cluster Around Oracles, Cosmos EVM and Unauthorized Minting

Nostra lost $3.5 million to oracle manipulation on Starknet, a Nomic forwarding bug minted unbacked bitcoin claims on Osmosis, and Cronos rewound almost 11,000 blocks to claw back most of a $120 million collateral attack.

- Published: 2026-09-25T05:49:08.849Z
- Canonical: https://polylog.news/crypto/2026-09-25/september-s-smaller-exploits-cluster-around-oracles-cosmos-e
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [Rekt News](https://www.rekt.news/), [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/b17f711cec1bfb78fc2b8bf7dc5ab37f56f31a7c), [CryptoSlate](https://cryptoslate.com/lightning-labs-discloses-critical-bug-marking-canceled-invoices-paid-risking-free-product-delivery/), [Bitcoin Magazine](https://bitcoinmagazine.com/news/man-gets-12-years-for-coinbase-scam)

Away from the Bitget breach, the month's incident log shows the same three failure modes repeating. Nostra, a lending protocol on Starknet, lost $3.5 million on 17 September when an attacker manipulated the price feed the protocol used to v…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-09-25/september-s-smaller-exploits-cluster-around-oracles-cosmos-e (subscription information: https://polylog.news/pricing).