Cyber Incident Victim: Mango Markets
Date:
Oct 2022
Location:
United States of America
Summary
The Mango Markets protocol experienced an incident where two accounts funded with USDC executed an outsized position in its MNGO perpetual futures contract, triggering extreme volatility. This activity caused the underlying MNGO/USD prices on multiple exchanges to rapidly surge by 5 to 10 times within minutes, significantly disrupting normal market operations. The event highlighted vulnerabilities in the protocol's risk management systems when facing concentrated trading actions.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On October 11, 2022, at approximately 22:00 UTC, the Mango Markets decentralized finance protocol experienced a significant incident involving market manipulation. Two accounts funded with USDC cryptocurrency established an outsized position in MNGO-PERP, the perpetual futures contract tied to Mango's native MNGO token. This coordinated trading activity coincided with extreme volatility in MNGO's underlying spot market prices across multiple centralized exchanges. Within minutes of the position being established, the MNGO/USD trading pairs on FTX and Ascendex recorded price increases ranging from 5x to 10x their previous values. The rapid appreciation occurred without corresponding fundamental developments supporting such valuation changes, indicating artificial inflation through concentrated buying pressure.
Mango Markets publicly acknowledged the incident through an official Twitter statement on the same day, confirming the basic sequence of events involving the two accounts and the anomalous price movements. The protocol did not initially disclose specific financial impacts, security countermeasures, or attribution details regarding the responsible parties. The public statement served as the primary confirmation of detection, though it omitted technical specifics about how the outsized position affected protocol liquidity or whether trading was halted during the event. Market data from the affected exchanges showed MNGO prices returning to pre-incident levels following the initial spike, suggesting the manipulation was temporary though impactful during its duration. No additional official updates regarding recovery efforts or protocol changes appeared in the immediately available source material documenting the event's aftermath.