VUSD

Oracle

Movement

Chains

IOTA

<h2 id="b-tldr-b">TLDR:</h2><ul><li style="font-weight: 400">Switchboard halted Move-based oracle operations on Aptos, Sui, IOTA and Movement after a potential compromise.</li><li style="font-weight: 400">An IOTA oracle incident allegedly pushed a price feed to $10M, enabling about 4.94M VUSD to be minted.</li><li style="font-weight: 400">The IOTA incident reportedly liquidated 45 users as investigators examined the potential compromise.</li><li style="font-weight: 400">Switchboard said no similar issue was reported on Solana, but users were advised to migrate temporarily.</li></ul>Switchboard has <a href="https://www6.twstalker.com/switchboardxyz/status/2093816532627300487" rel="noopener noreferrer nofollow">halted</a> oracle operations across Aptos, Sui, IOTA, and Movement after contributors identified a potential compromise involving its Move-based deployments. The coordinated shutdown affects applications using its data feeds for prices, collateral valuations, liquidations, and other automated <a href="https://blockonomi.com/binance-research-bitcoins-expanding-role-in-decentralized-finance/" rel="noopener noreferrer nofollow">decentralized finance</a> functions.<div class="embed-x"><blockquote class="twitter-tweet"><img src="https://s.w.org/images/core/emoji/17.0.2/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">ALERT: Oracle network <a href="https://x.com/switchboardxyz?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@switchboardxyz</a> has halted operations on Aptos, Sui, IOTA and Movement after identifying a potential compromise affecting its Move based implementations.No similar issue has been identified on <a href="https://x.com/solana?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@Solana</a>, but users are being advised to temporarily migrate… <a href="https://t.co/mfc68xd0ty" rel="noopener noreferrer nofollow">pic.twitter.com/mfc68xd0ty</a>— SolanaFloor (@SolanaFloor) <a href="https://x.com/SolanaFloor/status/2093840849989730315?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">August 29, 2026</a></blockquote></div>The blockchains themselves remain operational as&nbsp; the suspension applies only to the <a href="https://blockonomi.com/chainlink-link-eyes-major-breakout-as-wall-street-giants-jpmorgan-and-ubs-deploy-oracle-networks/" rel="noopener noreferrer nofollow">Oracle Network deployments</a> running on those ecosystems. Contributors coordinated with affected teams and security organizations while investigators examine the incident and determine whether additional applications were exposed.<h2 id="b-iota-s-10m-oracle-feed-incident-raises-defi-risk-b">IOTA’s $10M Oracle Feed Incident Raises DeFi Risk</h2>The investigation follows an IOTA incident involving an allegedly compromised oracle key that reportedly pushed an asset price feed to $10 million. That manipulated valuation was then reportedly used against Virtue, an IOTA-based collateralized debt position protocol.According to the reported incident details, the attacker minted approximately 4.94 million VUSD using collateral whose apparent value had been inflated by the corrupted feed. The event also reportedly triggered liquidations affecting 45 users.Basically, Virtue allows users to <a href="https://docs.virtue.money/mechanisms/cdp-collateralized-debt-position" rel="noopener noreferrer nofollow">mint VUSD</a> after depositing assets including IOTA and stIOTA as collateral. Therefore, accurate external pricing remains essential for maintaining collateral ratios and determining when positions should be liquidated.However, when an oracle reports an extreme price, smart contracts can treat relatively small collateral deposits as assets worth far more than their market value. That distortion can consequently affect borrowing limits, debt creation, and automated liquidations before the incorrect data is removed.Nevertheless, Switchboard has not publicly confirmed that the reported IOTA event explains the entire potential compromise. Its initial disclosure did not identify a root cause, attacker, confirmed losses, or affected application count.A technical postmortem has also not been published. As a result, the available information does not establish whether the issue originated from contract code, signing credentials, infrastructure, or another component.<h2 id="b-switchboard-halts-move-deployments-as-solana-shows-no-similar-issue-b">Switchboard Halts Move Deployments as Solana Shows No Similar Issue</h2>The four suspended deployments share Move-based smart-contract infrastructure, making that common architecture central to the investigation. Move was originally developed at Facebook for the Diem blockchain project.It later became fundamental to <a href="https://docs.switchboard.xyz/docs-by-chain/aptos" rel="noopener noreferrer nofollow">Aptos</a> and Sui, while IOTA adopted the Move Virtual Machine through its <a href="https://moneycheck.com/iota-news-confirms-rebase-rollout-blockdags-podcast-gives-rare-inside-look-before-listings/" rel="noopener noreferrer nofollow">Rebased upgrade</a>. That architecture reached mainnet in May 2025 and introduced a programmable Move-based Layer 1.Still, the shared programming environment does not establish that Move contains the vulnerability. The known issue is limited to Switchboard’s potentially compromised Move implementations across the affected networks.Meanwhile, no similar reports have emerged involving the provider’s Solana implementation. Nevertheless, users were advised to temporarily migrate to alternative <a href="https://parameter.io/chainlink-link-surges-12-after-coinbase-selects-oracle-for-tokenized-stock-feeds/" rel="noopener noreferrer nofollow">oracle solutions</a> while the investigation continues.The incident therefore highlights how <a href="https://coincentral.com/ostium-loses-18m-in-oracle-exploit-as-defi-attack-wave-continues/" rel="noopener noreferrer nofollow">oracle failures</a> can spread quickly through DeFi systems as applications depend on external prices for automated decisions. Multiple providers, deviation limits, circuit breakers, and emergency pauses can limit exposure when feeds behave unexpectedly.For developers and users, the central questions now concern the precise attack vector, the number of affected applications, and restoration timelines. Until investigators publish their findings, the halted Move deployments will remain the clearest containment measure taken across Aptos, Sui, IOTA, and Movement.The post <a href="https://blockonomi.com/oracle-network-switchboard-halts-four-chains-over-potential-move-compromise/" rel="noopener noreferrer nofollow">Oracle Network Switchboard Halts Four Chains Over Potential Move Compromise</a> appeared first on <a href="https://blockonomi.com" rel="noopener noreferrer nofollow">Blockonomi</a>.

Oracle Network Switchboard Halts Four Chains Over Potential Move Compromise

Table of Contents

Blockonomi

Other articles published on Aug 30, 2026

Deribit Ends Daily Proof-of-Reserves Updates After Coinbase Custody Shift

Ajna Exploit: $775,400 Drained and No Pause Button in the DeFi Lending Protocol

Bitcoin-Nasdaq ratio falls 62%, matching prior cycle lows as ETFs rebound

Ethereum ETFs Take $226M in a Day, Nearly Matching Bitcoin Inflows

A $1.1 Million Crypto Card Hack Crashed a Neobank's Token 49%

Bitcoin ETFs Draw $2.8B in 8-Day Streak as BTC Tests $80K

Join our free newsletter for daily crypto updates!