A single compromised signing key at oracle provider Switchboard forced a coordinated shutdown of price feeds across four Move-based blockchains — Sui, Aptos, IOTA, and Movement — on August 29, 2026. The attacker exploited control over all 14 oracle signers on Switchboard's IOTA mainnet queue to p...
"Deposits and withdrawals will remain paused until oracle integrity is restored and verified to prevent further losses." — Full Sail, Sui-based DeFi Protocol
A single compromised signing key at oracle provider Switchboard forced a coordinated shutdown of price feeds across four Move-based blockchains — Sui, Aptos, IOTA, and Movement — on August 29, 2026. The attacker exploited control over all 14 oracle signers on Switchboard's IOTA mainnet queue to push IOTA's reported price to $10 million, minting approximately 4.94 million VUSD stablecoins through the Virtue CDP protocol and triggering 47 liquidations affecting 45 users. Separate losses of roughly $91,000 hit automated vaults on Full Sail, a Sui-based DEX that subsequently announced it would cease operations entirely.
As of September 2, 2026, Switchboard has not published a root-cause analysis, a recovery timeline, or a compensation commitment. Mysten Labs, the company behind Sui, has rejected Full Sail's request for financial support. The incident exposes concentrated dependency risk in the Move ecosystem's oracle infrastructure and raises questions about whether protocols building on younger chains have adequate redundancy in their price-feed architecture.
On August 29, 2026, Switchboard — an oracle network that supplies off-chain price data to DeFi applications — detected what it described as a "potential security vulnerability" in its Move-based network implementations. Within hours, the project's contributors suspended oracle services across four blockchains: Sui, Aptos, IOTA, and Movement.
The four chains share a common technical lineage. Move, the smart-contract language originally developed at Meta for the Diem project, underpins all four networks. Switchboard's Solana deployment, which runs on a separate codebase, remained operational and unaffected.
The coordinated shutdown left DeFi applications on these chains without access to external pricing data — the reference points that underpin collateral valuations, borrowing limits, automated liquidations, and derivatives settlement. Any lending market, vault strategy, or derivatives venue that relied solely on Switchboard's Move feeds was either paused or forced into a rushed migration to alternative providers such as Pyth, Chainlink, or RedStone.
Timeline:
| Date | Event | |------|-------| | Aug 29, 2026 | Switchboard detects potential compromise in Move-based oracle implementations | | Aug 29, 2026 | Switchboard halts price feeds on Sui, Aptos, IOTA, and Movement | | Aug 29, 2026 | Attacker exploits IOTA oracle feed; Virtue CDP protocol drained | | Aug 29, 2026 | Full Sail confirms vault losses on Sui; pauses deposits and withdrawals | | Aug 30, 2026 | Full Sail announces it will gradually cease operations | | Aug 31, 2026 | Virtue freezes all protocol functions; warns VUSD is "materially undercollateralized" | | Sep 1, 2026 | Mysten Labs rejects Full Sail's request for financial support | | Sep 2, 2026 | No root-cause analysis or recovery timeline published by Switchboard |
The most consequential attack occurred on the IOTA network. According to reporting by CryptoSlate, the attacker gained control of signing keys for all 14 oracles on Switchboard's IOTA mainnet queue. With full authority over the feed, the attacker executed a two-phase manipulation:
Phase 1 — Inflate and mint: The attacker pushed IOTA's reported price to $10 million per token. At this fictitious valuation, they deposited 1 IOTA and used the inflated collateral value to mint approximately 4.94 million VUSD through Virtue, a collateralized debt position (CDP) protocol on IOTA.
Phase 2 — Crash and liquidate: The oracle feed was then pushed near zero, triggering a cascade of 47 liquidations across 45 Virtue users whose positions were denominated in IOTA. With the price feed showing IOTA as nearly worthless, the protocol's automated liquidation engine treated legitimate positions as undercollateralized and closed them out.
The estimated direct loss to Virtue users was approximately $455,000. The minted VUSD stablecoins, now backed by worthless collateral, left the protocol "materially undercollateralized," according to Virtue's own disclosure.
The attack's elegance — from a purely technical standpoint — was its simplicity. The attacker did not need to find a smart-contract vulnerability, execute a flash-loan arbitrage, or manipulate an on-chain automated market maker. They gained control of a signing key and rewrote the data directly.
At least three DeFi applications reported direct impacts:
Full Sail (Sui): The decentralized exchange confirmed losses of approximately $91,000 across three automated vaults. With a pre-incident TVL of roughly $226,000 according to DeFiLlama, the losses represented about 40% of the protocol's total deposited assets. On August 30, the team announced it would gradually cease operations, pledging to use remaining protocol liquidity and team funds to fully repay affected depositors.
Virtue (IOTA): The CDP protocol froze all core functions — borrowing, repayment, deposits, withdrawals, liquidations, and flash loans. 45 users lost positions through forced liquidations. The protocol's stablecoin, VUSD, was declared undercollateralized while remediation was pending. Total estimated losses: $455,000.
Volo (Sui): The yield vault protocol paused deposits and withdrawals as a precautionary measure. No losses were reported, suggesting the pause was enacted before the compromised feed could impact its positions.
Combined confirmed losses across all affected protocols: approximately $546,000. The figure is modest by DeFi exploit standards, but the systemic risk exposed by the incident — a single oracle key compromise freezing price feeds across four blockchains — is disproportionate to the dollar amount.
The Switchboard incident illuminates a structural vulnerability specific to the Move ecosystem. Unlike Ethereum's DeFi stack, where Chainlink dominates with integration into more than 2,400 projects and secures over $100 billion in value (roughly 70% of the oracle market by value secured), the Move-based chains have a thinner oracle provider landscape.
Sui's DeFi TVL stood at approximately $1.2 billion as of September 2, 2026, according to DeFiLlama. Aptos held roughly $1 billion. IOTA and Movement represent smaller ecosystems. Combined, the Move chains house more than $2 billion in DeFi deposits — all of which depended, to varying degrees, on a small number of oracle providers, with Switchboard as a primary feed source.
The concentration risk is compounded by architectural homogeneity. Because all four chains use Move-based smart contracts, a vulnerability in Switchboard's Move implementation propagated across the entire language ecosystem simultaneously. The Solana deployment, built on different code, was unaffected — a detail that suggests the issue was specific to how Switchboard implemented its oracle logic in Move, not a fundamental flaw in its core architecture.
Protocols that had integrated redundant oracle sources — pulling data from Pyth, Chainlink, or RedStone alongside Switchboard — were able to continue operating. Those that relied exclusively on Switchboard had no fallback. The incident functioned as an involuntary stress test of oracle redundancy across the Move ecosystem, and many protocols failed it.
The Switchboard compromise joins a growing catalog of oracle-related DeFi incidents:
| Year | Incident | Loss | Vector | |------|----------|------|--------| | 2022 | Mango Markets | $114M | Oracle price manipulation | | 2025 | Cetus Protocol (Sui) | $223M | Price calculation exploit with oracle-adjacent manipulation | | 2026 Q1 | Drift Protocol (Solana) | $285M | Social engineering + oracle abuse (attributed to DPRK) | | 2026 Aug | Switchboard (Move chains) | ~$546K | Oracle signing-key compromise |
According to data from DeepStrike and Immunefi, oracle manipulation attacks accounted for $52 million in losses across 37 incidents in 2024. In 2025, oracle attacks comprised roughly 13% of all DeFi exploits. The trend data shows that while individual oracle manipulation losses have declined from peak levels — down from approximately $400 million in aggregate to around $70 million in 2025 — the attack vector persists.
The Switchboard incident is notable not for its loss magnitude but for its blast radius. A single compromised key affected four independent blockchains simultaneously. In an ecosystem increasingly moving toward multi-chain deployment, this kind of cross-chain contagion from shared infrastructure represents a category of risk that protocol teams and auditors have insufficiently addressed.
The Sui ecosystem already experienced a major security event in May 2025, when the Cetus Protocol was exploited for $223 million. In that case, Sui validators intervened to freeze approximately $162 million of the stolen funds — a response that sparked debate about the chain's decentralization properties. The Switchboard incident is smaller in dollar terms but broader in systemic scope.
The incident has exposed several accountability gaps in the Move ecosystem's oracle infrastructure:
Switchboard acknowledged the "potential compromise" and halted services but, as of September 2, has not published a technical post-mortem, confirmed the root cause, or committed to a compensation framework for affected protocols and users. The project directed users to its status page at status.switchboard.xyz for updates.
Mysten Labs, the primary developer of the Sui blockchain, rejected Full Sail's request for financial support. The decision, while arguably consistent with the principle that Layer 1 developers are not responsible for application-layer losses, leaves a small protocol to absorb losses that originated from third-party infrastructure failure.
Full Sail committed to using its own liquidity and team funds to fully repay affected depositors — a notable response given the protocol's small size and the fact that the vulnerability was not in its own code.
Virtue froze protocol operations but has not disclosed a remediation plan for the $455,000 in user losses or the undercollateralized VUSD supply.
The lack of a formal post-mortem from Switchboard, four days after the incident, stands in contrast to industry norms. Major oracle providers and DeFi protocols typically publish preliminary incident reports within 24-48 hours. The delay erodes confidence in Switchboard's Move deployments and complicates risk assessment for protocols considering whether to resume integration.
One compromised signing key halted oracle feeds across four blockchains. The Switchboard incident demonstrates that shared infrastructure across Move-based chains creates correlated failure risk that individual protocol audits do not capture.
Combined confirmed losses total approximately $546,000 ($455,000 on Virtue, $91,000 on Full Sail), but the systemic risk exposure was orders of magnitude larger, given the $2+ billion in DeFi TVL across affected chains.
Oracle redundancy is not optional. Protocols that integrated multiple oracle providers continued operating. Those relying solely on Switchboard were paralyzed.
No post-mortem has been published four days after the incident. Switchboard has not confirmed the root cause, committed to compensation, or provided a service restoration timeline.
The incident killed a protocol. Full Sail, despite being the victim of a third-party infrastructure failure, announced it would cease operations — a reminder that small DeFi protocols have no margin of error for external dependencies.
Layer 1 foundations are not backstops. Mysten Labs' rejection of Full Sail's support request establishes that application-layer losses from oracle failures are not the chain developer's responsibility, leaving protocols to self-insure against infrastructure risks they do not control.
The Switchboard oracle compromise is a low-dollar, high-signal event. The $546,000 in confirmed losses is a rounding error by DeFi exploit standards. The structural lesson is not.
A single signing-key compromise propagated across four blockchains because they shared a common smart-contract language, a common oracle provider, and — in many cases — a lack of redundant price feeds. The Move ecosystem's DeFi infrastructure, still maturing, faces a dependency concentration that Ethereum's DeFi stack largely addressed years ago through Chainlink's dominance and the subsequent emergence of competing providers like Pyth and RedStone.
For protocols on Sui, Aptos, IOTA, and Movement, the path forward requires multi-oracle integration as a non-negotiable security baseline. For Switchboard, the delayed post-mortem is becoming a credibility problem. And for the broader DeFi industry, the incident reinforces what oracle infrastructure researchers have long argued: oracles are the narrowest point of the DeFi value chain, and their failure modes extend far beyond the protocols they directly serve.