One Ring Finance was exploited via flash loan price manipulation when the protocol's LP token price calculation lacked time-weighted averaging. The attacker pre-positioned assets through Celer Network's cBridge and deployed a contract to drain liquidity.