How Does a Flash Loan Attack Exploit a Simple Spot Price Oracle?

A flash loan attack involves a malicious actor taking a massive, uncollateralized loan and using it to briefly manipulate the price of an asset on a low-liquidity DEX. If the smart contract uses this single, simple spot price oracle, the manipulated price is fed to the contract.

The attacker then executes a profitable trade (like a liquidation or arbitrage) based on the false price before repaying the loan in the same transaction.

What Is a Flash Loan and How Does It Enable a Price Feed Attack?
What Is a “Flash Loan” and How Does It Relate to Market Manipulation Risks on DEXs?
What Is the Difference between a 51% Attack and a Sybil Attack?
In DeFi, What Risk Does Improper Sequencing of Price Oracle Updates and Trades Pose?
How Do Flash Loan Attacks Exploit Smart Contract Vulnerabilities?
What Is a ‘Flash Loan Attack’ and How Does It Exploit DEX Protocols?
How Can a Flash Loan Attack Exploit a Vulnerable Oracle Used by an Options Protocol?
What Is the Risk of a “Flash Loan Attack” on a DEX Liquidity Pool?

Glossar