Fortress

Fortress operates as a decentralized finance protocol within the cryptocurrency ecosystem. Its core services involve facilitating lending and borrowing activities using digital assets. The platform utilizes its own native token as a key component of its operational mechanics, integrating it directly into lending functions. Users interact with the protocol to manage cryptocurrency holdings for financial activities like securing loans or earning interest, relying on its underlying smart contracts.

The protocol experienced a significant security incident in May 2022, revealing critical vulnerabilities in its infrastructure integration. Attackers successfully manipulated a third-party price feed oracle used by Fortress, exploiting inadequate verification protocols. This manipulation artificially altered the value of the platform's native token, enabling the theft of approximately $3 million worth of cryptocurrency, specifically 1,048.1 Ethereum and 400,000 DAI stablecoins. The breach caused the native token's value to plummet by over 45% and disrupted lending operations significantly. This incident highlighted Fortress's reliance on external oracle providers for critical price data and exposed a specific weakness in its security posture concerning the validation of those external feeds, a flaw noted in similar attacks against other DeFi platforms. The attackers subsequently laundered the stolen funds through the Tornado Cash mixer.