Nostra Finance
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·5oWKYp…oN8ZSummary
Nostra Finance is a DeFi lending and borrowing protocol built on Starknet, originally developed by Tempus and described as the liquidity layer of the Starknet ecosystem. On September 17, 2026, the protocol suffered an oracle price manipulation exploit in which an attacker inflated the NSTR governance token price approximately 8,000x and borrowed roughly $3.5 million in assets against artificially inflated collateral. All lending market functions were paused immediately upon detection; as of the time of this report, approximately $1.92 million had been bridged to Ethereum and recovery remained unconfirmed.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Community submissions
- Under reviewincriminatingWayback pending9/20/2026, 4:08:48 PM
“Confirmed $3.5M oracle manipulation exploit on Starknet on September 17, 2026 — new incident post-dating any prior Nostra Finance entry”
— avoid-scout
Timeline(9 events)
1 March 2024
Nostra launched nstSTRK liquid staking token on Starknet.
Gate Learn — Nostra Finance Explained1 June 2024
NSTR governance token distributed via airdrop. Founder David Garai stepped down as CEO shortly thereafter.
AMBCrypto — Nostra hit by $3.5M Oracle attack24 March 2025
Nostra paused borrowing against xSTRK and sSTRK after price feed errors inflated their oracle values approximately three times within a narrow block range. No confirmed financial losses reported.
Bitnewsbot — Starknet's Nostra Protocol Pauses LST Borrowing After Oracle Error17 September 2026
At approximately 05:23 UTC, attacker created a fake NSTR/SolvBTC pool on Starknet with approximately 1.5 SolvBTC of one-sided liquidity and began wash-trading through it.
DEV Community — Nostra Finance $3.5M Exploit17 September 2026
By approximately 05:47–05:48 UTC, repeated swaps through the thin pool printed NSTR's reported price at approximately $49.50, up from approximately $0.006 — an approximately 8,000x increase.
DEV Community — Nostra Finance $3.5M Exploit17 September 2026
Between approximately 05:48 and 05:50 UTC, attacker used inflated NSTR as collateral to borrow approximately $3.5 million in ETH, STRK, USDC, USDT, WBTC, and DAI from Nostra's money market.
CryptoTimes — Nostra Halts Its Starknet Money Market17 September 2026
Borrowed proceeds were routed through AVNU, Ekubo, and JediSwap on Starknet. Nostra detected the exploit and paused all supply, borrow, withdrawal, and liquidation functions.
DEV Community — Nostra Finance $3.5M Exploit18 September 2026
CertiK reported approximately $1.92 million in assets had been bridged from Starknet to Ethereum, including approximately 234.57 ETH and 1.3 million DAI, arriving at Ethereum address 0xa059aaab82773caf622de9d9a0f2dbf9aa7f3c37. GoPlus Security, PeckShield, CertiK, and SlowMist all independently classified the event as oracle price manipulation.
CryptoDailyUK — Nostra Pauses Market After NSTR Oracle Manipulation18 September 2026
Nostra issued public statement confirming the pause, warning users against wallet-connect scams, and indicating a detailed post-mortem would follow. Final loss figures and recovery status remained unconfirmed.
Blockfence — Nostra Halts Starknet Money Market After $3.5M Oracle Manipulation ExploitDecision Log
- hash: 6x5mCyL8TbvmPxNBMQh68yXY74miRiFFDmMoSRAYejoK
This investigation is cryptographically anchored to the Solana blockchain (1 event). 13 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 9/20/2026, 12:03:47 PM
last updated: 9/20/2026, 6:47:05 PM
avoid.net — verified advice for a post-truth world