Vesu Protocol (Pragma Oracle Malfunction — September 2026)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·54r5FT…c6fQSummary
On September 4, 2026, Starknet lending protocol Vesu suffered approximately $3 million in erroneous liquidations after Pragma's oracle publishing pipeline delivered corrupted price data for roughly two minutes. Vesu's own smart contracts functioned as designed; the root cause was an upstream token-mapping error in Pragma's asset registry that caused major asset prices to appear at roughly half their true market value. By September 13, 2026, approximately 95% of lost value had been recovered and a structured refund process was underway, with three pool curators administering distributions to affected users.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Timeline(11 events)
4 September 2026
At 04:07:52 UTC, an incorrect USDT/USD aggregate becomes active in Pragma's publishing pipeline after three healthy source observations fall outside the 60-minute freshness window simultaneously, leaving only a Bitstamp observation and a stale Ekubo-derived value to form the median.
Pragma post-mortem4 September 2026
At 04:08:14 UTC, the conversion error propagates to BTC, ETH, WBTC, STRK, and USDC price feeds, making those assets appear to be valued at roughly half their true market price.
Pragma post-mortem4 September 2026
Between 04:08:16 and 04:10:04 UTC, Vesu's automated liquidation engine executes 47 liquidations across 42 borrower wallets and seven pools, seizing approximately $3,077,500 in collateral.
Pragma post-mortem / Vesu Security Council refund post4 September 2026
At approximately 04:40 UTC, Pragma's price feeds normalize without manual intervention.
Pragma post-mortem4 September 2026
At 07:59 UTC, Pragma deploys SDK version 2.13.1, fixing the USDT/USD conversion factor to 1.00 and removing the feedback mechanism that allowed the erroneous on-chain median to propagate to other feeds.
Pragma post-mortem4 September 2026
Vesu pool curators suspend affected markets pending review of Pragma's fix. Vesu states its smart contracts operated as designed and contained no vulnerability.
Crypto.news5 September 2026
Multiple crypto news outlets publish initial coverage of the incident. Vesu directs affected users to open Discord support tickets. Earn product users are warned not to close positions prematurely to preserve refund eligibility.
Cryptonomist / Crypto.news7 September 2026
The principal liquidator cooperatively returns seized assets, less liquidation costs and reward, to the Vesu Security Council multisig. Recovery funds are confirmed in the multisig.
Pragma post-mortem13 September 2026
Asset recovery is declared complete. Vesu Security Council publishes the refund structure: 95% recovery at current prices across three user categories, administered by curators Vesu, Re7 Labs, and Clearstar. Pragma deploys additional monitoring corrections.
Vesu Security Council refund post15 September 2026
Pragma begins deploying SDK improvements and Foundation publisher activation as part of its remediation roadmap. Multisig migration to 3-of-5 structure is initiated.
Pragma post-mortem17 September 2026
Separate incident: Nostra Finance, a different Starknet lending protocol, reportedly suffers approximately $3.5 million in losses due to alleged deliberate price manipulation of its NSTR token. This event is unrelated to the Vesu/Pragma pipeline failure of September 4.
CryptoTimesDecision Log
- hash: iShHXM2ZtmRSf5vQmAguC7k4CxrVmyhXofe8e3PoYPU
This investigation is cryptographically anchored to the Solana blockchain (1 event). 10 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 10/4/2026, 11:16:52 PM
last updated: 10/5/2026, 4:05:35 AM
avoid.net — verified advice for a post-truth world