New Gold Protocol

New Gold Protocol (NGP) was exploited on its launch day when the attacker exploited a flashloan-powered price oracle manipulation. The protocol relied on DEX pair reserves to calculate the NGP token price, allowing a single Uniswap pool to be manipulated.

The attacker used a flash loan to distort pool balances, artifically lowering the reported price to bypass transaction limits and acquire massive amounts of tokens at unrealistic prices. Stolen assets were bridged to Ethereum through Tornado Cash.