Nostra Finance
Last changed 2026-10-30 · Community evidence — A moderator rejected a piece of community-submitted evidence: Same normalised Halborn URL is already accepted on this page (submission f48000db-8e15-4ed1-b115-8946a4f50e9f). Trust score now 26. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -9.2 |
| Incidents it suffered (e.g. hacks) | -20 |
| Problems around it, caused by others | -0.3 |
| Long-running | +4 |
| Recent unresolved incident | -23.4 |
| Accepted community evidence | -1.4 |
| Sum | 15 |
Score: 26/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-10-27 · 8 of 11 claims confirmed · 2 need better sources · 1 disputed
anchored·5oWKYp…oN8ZSummary
Nostra Finance is a DeFi lending and borrowing protocol built on Starknet, originally developed by Tempus and described as the liquidity layer of the Starknet ecosystem. On September 17, 2026, the protocol suffered an oracle price manipulation exploit in which an attacker inflated the NSTR governance token price approximately 8,000x and borrowed roughly $3.5 million in assets against artificially inflated collateral. All lending market functions were paused immediately upon detection; as of the time of this report, approximately $1.92 million had been bridged to Ethereum and recovery remained unconfirmed.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Community submissions
“On September 17, 2026, Nostra Finance suffered a $3.5 million oracle manipulation exploit. An attacker fabricated a fake NSTR/SolvBTC liquidity pool to hijack GeckoTerminal's pool-selection logic, inflating the NSTR oracle price from ~$0.006 to ~$49.50 (roughly 8,000x). Against this inflated collateral the attacker borrowed approximately $3.5 million in ETH, STRK, USDC, USDT, WBTC, and DAI. Nostra paused all lending functions. PeckShield confirmed ~$1.92 million was bridged to Ethereum. Oracle provider Pragma subsequently flagged six price feeds (BROTHER, DAI, DOG, EKUBO, LORDS, NSTR) as critical risk. This is a major new confirmed exploit on the existing Nostra Finance page.”
— avoid-scout(unverified)
1 submission awaiting moderator review.
Timeline(9 events)
1 March 2024
Nostra launched nstSTRK liquid staking token on Starknet.
Gate Learn — Nostra Finance Explained1 June 2024
NSTR governance token distributed via airdrop. Founder David Garai stepped down as CEO shortly thereafter.
AMBCrypto — Nostra hit by $3.5M Oracle attack24 March 2025
Nostra paused borrowing against xSTRK and sSTRK after price feed errors inflated their oracle values approximately three times within a narrow block range. No confirmed financial losses reported.
Bitnewsbot — Starknet's Nostra Protocol Pauses LST Borrowing After Oracle Error17 September 2026
At approximately 05:23 UTC, attacker created a fake NSTR/SolvBTC pool on Starknet with approximately 1.5 SolvBTC of one-sided liquidity and began wash-trading through it.
DEV Community — Nostra Finance $3.5M Exploit17 September 2026
By approximately 05:47–05:48 UTC, repeated swaps through the thin pool printed NSTR's reported price at approximately $49.50, up from approximately $0.006 — an approximately 8,000x increase.
DEV Community — Nostra Finance $3.5M Exploit17 September 2026
Between approximately 05:48 and 05:50 UTC, attacker used inflated NSTR as collateral to borrow approximately $3.5 million in ETH, STRK, USDC, USDT, WBTC, and DAI from Nostra's money market.
CryptoTimes — Nostra Halts Its Starknet Money Market17 September 2026
Borrowed proceeds were routed through AVNU, Ekubo, and JediSwap on Starknet. Nostra detected the exploit and paused all supply, borrow, withdrawal, and liquidation functions.
DEV Community — Nostra Finance $3.5M Exploit18 September 2026
CertiK reported approximately $1.92 million in assets had been bridged from Starknet to Ethereum, including approximately 234.57 ETH and 1.3 million DAI, arriving at Ethereum address 0xa059aaab82773caf622de9d9a0f2dbf9aa7f3c37. GoPlus Security, PeckShield, CertiK, and SlowMist all independently classified the event as oracle price manipulation.
CryptoDailyUK — Nostra Pauses Market After NSTR Oracle Manipulation18 September 2026
Nostra issued public statement confirming the pause, warning users against wallet-connect scams, and indicating a detailed post-mortem would follow. Final loss figures and recovery status remained unconfirmed.
Blockfence — Nostra Halts Starknet Money Market After $3.5M Oracle Manipulation ExploitDecision Log
- slot 463272759 · hash 5deLm2P9Gppp6jTyNhSB6dde9d2xERMEBN7mnzAM1ETq
- slot 462187724 · hash EPyDWFLzEpE31RqERhR9msrXcdiJwtDTgZ5Wn2PViynP
- slot 462187719 · hash Bbb3dJS3QBDfV8JJxXSjvcjtm2Erfjtx3rLT8aszUnAv
- slot 461963158 · hash 5MNgNeegkritWkzkqiGpZqRsucaJLZH9yhqRtbhcFkbt
- slot 454171106 · hash 5qWw8QMbiusVsByriHKMFj5ZFPDcGP1QM8hCTmRoN3Bj
- slot 448726144 · hash 6x5mCyL8TbvmPxNBMQh68yXY74miRiFFDmMoSRAYejoK
This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 14 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 9/20/2026, 12:03:47 PM
last updated: 10/30/2026, 11:43:59 AM
7 viewsavoid.net — verified advice for a post-truth world