CryptoSlate
A suspected compromise of Switchboard's Move-language oracle implementation triggered liquidations and forced access pauses across at least four DeFi networks on Aug. 31. The provider halted deployments on Aptos, Sui, IOTA and Movement while it investigates; its Solana implementation showed no similar reports and remained live.
The most detailed account came from IOTA credit protocol Virtue, which reported that an attacker gained control of the signing keys used by all 14 oracles on Switchboard's IOTA mainnet queue. The attacker pushed IOTA's reported price to $10 million, deposited 1 IOTA and minted roughly 4.94 million VUSD, then drove the feed near zero. That collapse triggered 47 liquidations affecting 45 users and left VUSD materially undercollateralized. Virtue froze borrowing, repayment, deposits, withdrawals, liquidations and flash loans while remediation is pending.
On Sui, exchange Full Sail confirmed its vaults lost funds and paused deposits and withdrawals until oracle integrity is restored and verified. The disclosure did not identify the affected vaults or quantify the loss; DefiLlama placed Full Sail at roughly $229,000 in total value locked on Aug. 31. Volo, also on Sui, paused vault deposits and withdrawals as a precaution and said its vaults were unaffected. Sui's status page showed all systems operational.
Why it matters
Cross-chain oracle incidents no longer stay contained to a single deployment. A shared Move-language implementation across Aptos, Sui, IOTA and Movement means one underlying bug or key compromise propagates to every chain that depends on it in parallel. Switchboard has not yet published a root cause or a timeline for restoring the four Move deployments, leaving the full application footprint unresolved. Until that list is out, downstream protocols on those chains cannot fully scope their exposure.
Market impact
Virtue's figures give the most concrete read on the day: 47 liquidations, 45 affected users, an undercollateralized VUSD, and a frozen protocol awaiting remediation.
Frequently asked questions
-
Which chains were affected by the Switchboard oracle compromise?
Switchboard halted its Move-language deployments on Aptos, Sui, IOTA and Movement on Aug. 31 after detecting a suspected compromise. The provider's Solana implementation was unaffected and remained live.
-
What happened to Virtue protocol on IOTA?
Attackers gained control of the signing keys for all 14 IOTA mainnet oracles and pushed IOTA's reported price to $10 million, minting about 4.94 million VUSD from a 1 IOTA deposit. The feed then collapsed, triggering 47 liquidations across 45 users and freezing the protocol.
-
Did any user funds get lost on Sui?
Full Sail confirmed its vaults lost funds and paused all deposits and withdrawals, but did not disclose the amount. DefiLlama pegged its TVL at roughly $229,000 on Aug. 31. Volo paused access as a precaution and said no user funds were affected.
-
Has Switchboard published a root cause?
No. As of the report, Switchboard had not published a root cause, a timeline for restoring the four Move deployments, or a complete list of affected integrations. Until that list is out, downstream protocols cannot fully scope their exposure.
-
Why does this matter beyond the immediate incident?
A single Move-language implementation failure propagated to four chains simultaneously. Cross-chain infrastructure shared across ecosystems turns one bug into parallel exposure, and there is no formal containment mechanism between deployments.
TheBlock
CoinDesk
Lookonchain
WuBlockchain