Pyth feed lag exploited for arbitrage drain.
Attacker wallets funded and staged ahead of the oracle manipulation exploit against SolFlare Pools.
$19.4M drained from SolFlare Pools on Solana via Oracle Manipulation.
PeckShield flagged the anomalous transactions and published an initial alert.
SolFlare Pools paused affected contracts or withdrawals and began tracing outbound flows.
Stolen assets followed through mixers, bridges, and exchange deposit addresses.
$4.2M of $19.4M recovered (22%); the remainder is still unaccounted for.
Remaining funds monitored across chains with exchange partners notified.