Nostra’s lending market on Starknet suffered a $3.5 million exploit after an attacker manipulated the NSTR oracle price. A single account used NSTR tokens as collateral to borrow approximately $3.5 million in ETH, STRK, USDC, USDT, WBTC, and DAI from the protocol. The attacker has already bridged roughly $1.92 million in stolen assets to Ethereum, including 234.57 ETH and 1 million DAI. Security firm PeckShieldAlert identified the oracle manipulation as the root cause of the unauthorized withdrawals.