Switchboard, the multi-chain oracle protocol that supplies price data to decentralized applications across several blockchains, has shut down its Move-based deployments after discovering what it described as a potential security compromise. The affected networks include Aptos, Sui, IOTA, and Movement.

The halt, announced during the transition from August 28 to 29, stands as one of the more serious oracle-level incidents in recent memory — and on at least one network, the damage was not theoretical.

What Happened on IOTA

An attacker exploited a compromised oracle key to manipulate the IOTA price feed, temporarily setting the token's price to $10 million.

With the feed reporting a wildly inflated IOTA price, the attacker was able to mint approximately 4.94 million VUSD through the Virtue CDP protocol. CDP (collateralized debt position) protocols allow users to lock up assets and borrow stablecoins against them — and when the oracle reports that collateral is worth $10 million per token, the protocol permits borrowing accordingly.

The fallout hit 45 users directly through liquidations. Exchange addresses were frozen in response, and the Virtue CDP protocol itself was halted.

Scope of the Shutdown

Switchboard's decision to halt all Move-based implementations suggests the vulnerability may be architectural rather than network-specific. Move is the programming language originally developed at Meta (then Facebook) for the Diem project; it now underpins Aptos, Sui, and their derivative ecosystems, including Movement and IOTA's newer infrastructure.

The protocol said it is actively collaborating with relevant security agencies to investigate the breach.

Notably, Switchboard's Solana deployment was not affected. Its Solana-based infrastructure runs on different code that apparently was not vulnerable to the same exploit vector. Even so, Switchboard advised Solana users to temporarily seek alternative oracle options while the investigation proceeds.

Why Oracle Compromises Are Uniquely Dangerous

Oracles occupy one of the most critical positions in the DeFi stack, serving as the bridge between real-world data — token prices, interest rates, asset values — and on-chain smart contracts that execute financial transactions based on that data. Lending markets, stablecoin issuance, derivatives, and liquidation engines all depend on these feeds being accurate; a single corrupted value can cascade through every protocol that consumes it, which is exactly what played out on IOTA.

The DeFi ecosystem has experienced oracle-related exploits before. Mango Markets on Solana suffered a $114 million exploit in 2022 after an attacker manipulated the platform's oracle price.

What makes the Switchboard incident particularly concerning is that the compromise appears to have occurred at the key level rather than through market manipulation. The attacker did not need to execute complex trading strategies to move a price; they simply gained access to a key controlling the feed and rewrote the data directly. Key-level compromises of this kind are harder to defend against with market-based safeguards such as circuit breakers on price deviation, since the reported data originates from what appears to the consumer protocol as a legitimate source.

Implications for Affected Ecosystems

For Aptos, Sui, and Movement, the shutdown is disruptive even though no exploits have been confirmed on those networks. Any DeFi protocol relying on Switchboard for price feeds is effectively operating blind until service resumes — unable to process liquidations, update collateral ratios, or execute any price-dependent function.

Protocols that integrated redundant oracle sources from providers such as Pyth, Chainlink, or Redstone alongside Switchboard can continue operating. Those that did not are learning a costly lesson about single points of failure.

Switchboard's initial statements suggest that user funds have remained intact beyond the IOTA incident, though that assessment could evolve as the investigation deepens. Key open questions include how the oracle key was obtained, whether a fix has been audited before Move-based feeds are restored, and how affected IOTA users — including the 45 hit by liquidations triggered by manipulated prices — will be made whole.