Switchboard shut down its Move-based deployments on Aptos, Sui, IOTA, and Movement after detecting a potential oracle key compromise. An attacker used the breach to push IOTA's price to $10 million and mint approximately 4.94 million VUSD, triggering liquidations for 45 users, after which exchange addresses were frozen and the Virtue CDP protocol was halted.
Switchboard, the multi-chain oracle protocol that feeds price data to decentralized applications, halted operations on its Move-based networks after discovering what it called a potential security compromise. The affected chains are Aptos, Sui, IOTA, and Movement, and the shutdown came during the transition from August 28 to 29.
An attacker set IOTA's price to $10 million
On IOTA, an attacker exploited a compromised oracle key to temporarily set the token's price to $10 million. With the feed showing that inflated price, the attacker minted approximately 4.94 million VUSD through the Virtue CDP protocol, which lets users borrow stablecoins against locked-up collateral.
The fallout hit 45 users directly through liquidations. Exchange addresses were frozen and the Virtue CDP protocol itself was halted in response.
Why the shutdown spans four chains
Switchboard's decision to halt all Move-based implementations suggests the vulnerability may be architectural rather than limited to one network. Move, the programming language originally built at Meta for the Diem project, underpins Aptos, Sui, and their derivative ecosystems including Movement and IOTA's newer infrastructure. Switchboard said it was actively collaborating with relevant security agencies to investigate.
Its Solana deployment was not affected, since that infrastructure runs on different code that apparently wasn't vulnerable to the same exploit vector. Still, Switchboard advised even Solana users to temporarily seek alternative oracle options during the investigation.
What this means for the affected ecosystems
For Aptos, Sui, and Movement, the shutdown is disruptive even though no exploits have been confirmed on those networks beyond IOTA. Any DeFi protocol relying on Switchboard for price feeds cannot process liquidations, update collateral ratios, or execute other price-dependent functions until service resumes.
Protocols that had integrated redundant oracle sources from providers like Pyth, Chainlink, or Redstone alongside Switchboard can continue operating. Switchboard's initial statements suggest user funds have remained intact beyond the IOTA incident, but the protocol said that assessment could evolve as the investigation deepens.
Source: Crypto Briefing
Trading involves risk.
Risk Disclaimer
