Rekt School - Master Solana DeFi by Doing It Live

Rekt SchoolP5

0 Aura

Back to homePro tier

Step 1 of 7

P5 · Oracles & Flash Loan AttacksTOUR STEP

Spotlight Tour: Oracle Attack Lab

Let's take a quick spotlight tour of the user interface. We will highlight each essential area on your screen.

Complete or skip the spotlight tour to continue

Educational purposes only. Not financial advice. Tier 1 runs on Solana Devnet and Tier 2 in a sandbox — both use fake money. Never risk real funds.

SANDBOXEnvironment: Sandbox · simulated

LAB P5 • ORACLE ATTACK

Flash-Loan Oracle Attack

Flash-borrow, smash the pool, move the oracle, drain the protocol. Or fail.

Victim Pool Depth (quote side)$20,000

$2,000Thin pool = easy to move$100,000

Flash-Borrow Amount$200,000

$10,000$2,000,000

Protocol TVL (the prize)$5.0M

$0.5M$50.0M

Pool price after dump$121.000

Oracle reads$121.000

Attack cost (slippage)$2,000,000

Extractable value$5,000,000

Attacker Net Profit+$3,000,000

Profit is positive - bots will run this attack against you.

What Just Happened?

The flash loan pumped the 20,000-depth pool, moving its price 12000%. Because the protocol reads that spot ratio directly, its oracle believed the token was worth $121.00 and let the attacker borrow against fake value - draining $5,000,000 for a $2,000,000 cost. All in one transaction.