Enso Finance DPI Strategy Vault Loses 5.6 ETH After Oracle Pricing Error

Enso Finance DPI Strategy Vault lost about 5.6 ETH after an oracle pricing error, according to SlowMist monitoring. According to Foresight News, the issue stemmed from a flaw in the valuation path that made prices approximate spot quotes, while lacking TWAP consistency checks and price range validation, with the Uniswap V3 pool used for pricing also being imbalanced. The attacker exploited the flaw by swapping 0.683 WETH for 268.42 FARM on Uniswap V2. The imbalanced V3 pool incorrectly valued the trade at 6.3 WETH, about 9.2 times higher, allowing the attacker to mint excess shares at the wrong price and redeem them for profit. Enso said on X that the contract involved had been deprecated more than 4 years ago. It added that users had previously been advised to withdraw through official channels on Discord, Twitter, and GitHub, and said its current infrastructure does not use these contracts. Enso also said its current infrastructure has undergone more than 12 production audits.