Ploutos Money oracle misconfigured to use BTC/USD feed for USDC pricing. Attacker borrowed 187 ETH by depositing only 8 USDC (~10^12x discrepancy), exploiting the misconfiguration within one block.

The DeFi lending protocol Ploutos Money suffered an exploit due to a misconfigured price oracle (using Chainlink’s BTC/USD feed for USDC price), allowing an attacker to deposit minimal USDC collateral and borrow ~187.36 ETH, draining approximately $390K. The project’s website and social accounts were deleted shortly after, raising strong suspicions of an inside job or exit scam.