Oracle Audit

We are the security division of Oracle On-Chain

[Oracle Audit @OracleAudit]

Source →

https://t.co/dSOkfmfyv0

[Oracle Audit @OracleAudit]

Old bugs, fresh bags drained.

Most exploits aren't new attacks.

They're old mistakes getting paid again.

Recent vault hit for ~$2.7M:

→ Callback fires during the token transfer
→ State gets updated after the external call
→ Mint logic re-enters over and over in one tx
→ Supply explodes → vault gets cleaned out

Nothing fancy. Just standard token interfaces doing exactly what the spec allows.

Teams still assume “standard ERC behavior” is safe by default.

It isn’t.

If your contract interacts with external calls or callbacks before locking down state, you’ve got a reentrancy surface. Period.

That’s the entire reason Oracle Audit exists: catch these paths before they turn into on-chain Ls.

Not after they’re already on-chain history.