CozyFinance: a vulnerability in CozyFinance's use of a permissionless oracle allowed an attacker to… (~160,776 USDC.e (~$160K))

HACK OR EXPLOITCozyFinance: a vulnerability inCozyFinance's use of a permissionlessoracle allowed an attacker to… (~160,776USDC.e (~$160K))34IMPORTANCECLOSED1NEWS MEDIA1PIECESSep 25, 2026 09:28blockboard.net
In Stablecoins Oracles Hacks and security
Share on X Share on Telegram Share on Reddit Share on WhatsApp

What this rests on

Summary in preparation.

Market reaction

US USDC the event is about this asset from 2 h before to 4 h after the line marks the first headline
published
+0.01 % before publication
+0.00 % after
$1price at publication
12series points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 25 09:28

Thefts of a similar size

WhenWhat happenedFigure
41 days ago Cozy V2 · Unknown incident $163.3k
3.0 years ago Fake Celestia (TIA) incident $162.8k
2 months ago Enjin incident $162k
6.1 years ago Soda Protocol · Withdrawal Logic Flaw incident $160k
2.7 years ago Not Found (404) incident $156k

4200 incidents stored · 1489 were as large as this one or larger ($160k)