Inverse Finance was exploited via TWAP oracle manipulation on Uniswap v2, allowing an attacker to inflate INV token price and borrow assets beyond collateral value.
The attacker manipulated the Uniswap v2 TWAP (time-weighted average price) oracle for Inverse Finance's INV token. By accumulating INV tokens and executing swaps to spike the price over multiple blocks, they inflated the TWAP oracle reading used by Anchor (Inverse's lending protocol). This allowed them to deposit inflated-value INV as collateral and borrow $15.6M in other assets.
Borrowed assets (WBTC, ETH, DOLA, USDT) immediately converted and moved through Tornado Cash. Inverse Finance published a post-mortem and launched a debt repayment program. The protocol also suffered a second oracle manipulation attack in June 2022 for an additional $5.8M. Funds never recovered.
0x958236d317b6591c4da607c8ab24d6e54b06e9e60ccfdc4dbff6a3df96a1bb0a