Decentralized Oracle Switchboard Claims Its Move Language-Based Network Implementation May Have Been Compromised
Decentralized oracle Switchboard claims that its Move language-based network implementation may have been compromised. Contributors have coordinated with the ecosystem team and security agencies to suspend operations on Aptos, Sui, IOTA, and Movement. There are no similar reports for the Solana implementation, but it is still recommended to temporarily switch to other solutions during the investigation, with details to follow.
The blockchain itself continues to produce blocks, but the price feed has been halted. Lending, stablecoins, and derivatives relying on this feed need to switch to Pyth, RedStone, etc., or directly suspend liquidation. The Full Sail treasury on Sui has confirmed a loss of funds and frozen access; on IOTA, a protocol has been accused of minting approximately 4.94 million VUSD under abnormally high price feeds, triggering liquidation. Switchboard has not yet definitively linked these events to the root cause and has not released a technical review.
The Move ecosystem consists of four chains sharing the same oracle implementation, thus the shutdown is synchronized. The Solana stack is separate, serving as a control experiment: the same brand, different runtimes, unequal risks. When the oracle stops, collateral valuation and automatic liquidation become blind simultaneously, and applications can only continue to operate at incorrect prices or actively shut down.
The migration suggestion is to temporarily write competing oracles as backup feeds. Those who can change the feed within hours can still open for business; those who cannot are effectively exposing their treasury to outdated prices.
In market mechanics, the seller is the compromised oracle network, and the buyer is the Move ecosystem application that must immediately switch feeds. The event is driven by suspected key or implementation control. Funds are minted or withdrawn at incorrect price windows, while the rest is locked in the paused treasury. The beneficiaries are the easily switchable backup oracles; the ones under pressure are the depositors of single feed protocols and integrators that have written the four chains into the same security domain.
Source: Public Information
ABAB AI Insight
Oracles are the eyes of DeFi. Once the eyes are suspected, the automatic contracts on the four Move chains become blind simultaneously. Switchboard segments risk by language stack rather than by brand: when the Move implementation stops, the Solana implementation remains, indicating that what is shared is not the token, but a piece of code that can be breached by the same vulnerability or key. Full Sail reported a loss of funds first, while IOTA reported abnormal minting first, and the investigation is still pursuing whether both are controlled by the same key.
The capital path is the opposite of feed monopoly. Applications, in order to speed up their launch, only connect to one source, only to discover on the day of shutdown that the backup interface is a matter of life and death. Pyth and RedStone are experiencing panic migrations, not regular tenders. The treasury freeze is a way to buy time to avoid being liquidated at incorrect prices; for pools where minting has already occurred, time cannot be regained. Movement, Aptos, Sui, and IOTA being included in the same shutdown order effectively lowers the score for oracle diversity in the Libra descendant ecosystem.
Analogies can be drawn to multiple instances of oracle manipulation in 2022, as well as cross-chain bridges being compromised by the same multi-signature. The industry phase shows that the Move ecosystem application layer is growing rapidly, while the price feeding layer remains a single point. Those who treat price as external truth are handing over the treasury keys to the operators of that truth.
Structural judgments expose supply chain risks revealed by technological alternatives. The mechanism is: the liquidation engine trusts the price feed, the price feed trusts the implementation, and the implementation is reused by language. Once the language is compromised, the collateral on all four chains is simultaneously repriced. The shutdown acknowledges that the eyes are unusable, not that they can be repaired.
ABAB News · Cognitive Laws
When the oracle stops, automatic contracts are not conservative, they are blind
The four chains on the same language stack share the same breached implementation
Backup feeds are not optional; they are the switch for whether the treasury can open for business