Demex's Nitron lending market was exploited via donation-based oracle manipulation targeting a deprecated dGLP vault. An attacker donated a small amount of fsGLP to inflate the GLP redemption rate, which Nitron's oracle accepted as accurate pricing for dGLP. The attacker then used the falsely inflated dGLP value as collateral to borrow legitimate assets.