ChainHintbeta
    Case Studies/Mango Markets
    Mango Markets

    Mango Markets Hack: $116M Oracle Manipulation

    October 11, 2022 · Solana · Avraham Eisenberg (conviction vacated 2025, appeal pending)

    drained
    $116M
    returned (deal)
    $47M
    price pump
    10×
    core exploit
    1 tx

    What happened

    On October 11, 2022, Mango Markets — a decentralized trading platform on Solana — lost $116M to an oracle-price manipulation. Trader Avraham Eisenberg said publicly on 15 October 2022 that he was involved with the group behind the trades, and called them legal open-market actions. Using two accounts, the trades pushed MNGO's oracle price up roughly 10×, inflated the collateral to $423M on paper, and borrowed all available liquidity from the protocol. $47M was returned under a governance vote. Eisenberg was arrested in Puerto Rico in December 2022 and convicted by a jury in Manhattan in April 2024. On 23 May 2025 the trial judge acquitted him of wire fraud and vacated the commodities counts for improper venue (The Block, 24 May 2025). The government has appealed the wire-fraud ruling (DL News, 7 January 2026); as of 3 November 2026 no appellate decision has been reported.

    How the funds moved

    Step 1

    Oracle Price Manipulation

    The trader opened two large opposing MNGO-PERP positions across two wallets. Buying MNGO spot on thin markets (FTX, AscendEx) pushed the oracle price from $0.038 to $0.91 — a 23× spike — within 30 minutes. This inflated the long position's unrealized P&L to over $423M.

    Step 2

    Mass Borrow Against Inflated Collateral

    With $423M in phantom collateral, the account borrowed every liquid asset from Mango Markets: $116M in USDC, SOL, BTC, and other tokens. Mango's treasury and user deposits were fully drained. The inflated MNGO price then collapsed after the borrow, making the collateral worthless.

    Step 3

    Governance Negotiation and Partial Return

    A governance proposal offered to return $47M to cover bad debt if the protocol waived the remaining funds and agreed not to pursue legal action. The vote passed and $47M was returned. Eisenberg was arrested on federal charges in December 2022.

    Key findings

    Who Ran the Trades

    Avraham Eisenberg — self-identifiedOn 15 October 2022 Eisenberg wrote that he was involved with the group behind the trades and that its actions were legal. A jury convicted him in April 2024; on 23 May 2025 the judge set the verdict aside — wire fraud: acquittal; commodities counts: vacated for improper venue (The Block, 24 May 2025). The government's appeal of the wire-fraud ruling is pending (DL News, 7 January 2026).
    Conviction vacatedAppeal pending

    Attack Mechanism

    Oracle manipulation via thin Solana spot marketsMNGO spot markets on FTX and AscendEx had <$1M in liquidity. Pumping spot price moved Mango's TWAP oracle, inflating on-chain collateral value by 23×. No smart contract bug — pure economic exploit.
    Oracle Manipulation

    Partial Recovery via Governance

    $47M returned under a governance voteEisenberg argued that the governance vote was a binding settlement. The jury verdict against him was set aside in May 2025 and the government has appealed. The SEC and CFTC civil cases filed in January 2023 were stayed pending the criminal case.

    Chain

    Solana — first major DeFi exploit on-chainMango Markets ran on Solana's SPL token standard. The exploit demonstrated that economic oracle attacks — not EVM-specific — are possible on any chain with thin liquidity and TWAP oracle dependencies.
    Solana

    Investigate your own incident

    ChainHint traced the Mango Markets hack in minutes.
    Use the same tool for your case.