Mango Markets Oracle Manipulation (2022)
See the evidence before you trust the verdict.
Historical Investigation
This investigation covers the October 11, 2022 exploit, the subsequent governance settlement (October 14, 2022), the attribution chain through Avraham Eisenberg's trial and jury conviction on April 18, 2024, and the subsequent Rule 29 vacatur on May 23, 2025. All three conviction counts were dismissed - commodities counts (1+2) on venue grounds, wire fraud (Count 3) acquitted on sufficiency. A Second Circuit appeal was filed December 22, 2025 and is pending as of August 2026. Mango Markets relaunched in a revised form; this investigation covers the acute incident, the governance settlement, and the ongoing legal proceedings.
On October 11, 2022, Avraham Eisenberg drained approximately $116M from Mango Markets using an attack that required no code exploit. He manipulated the oracle price of MNGO - the protocol's native token, which served as collateral - by approximately 30x over a short window, then borrowed and withdrew essentially every asset in the protocol treasury against the inflated collateral. The protocol executed exactly as designed throughout. This investigation matters for three reasons. First, it isolates economic design failure as a distinct failure class: the oracle assumptions, the collateral model, and the borrowing limits all behaved correctly given what they were told; what they were told was false. Second, the attribution rests on self-identification plus formal prosecution rather than intelligence designation (as in Ronin and Harmony): Eisenberg publicly identified himself within days of the attack, was arrested in Puerto Rico in December 2022, and tried in the Southern District of New York - jury conviction April 2024, subsequently vacated via Rule 29 motion May 2025, government Second Circuit appeal pending. The prosecution record creates a qualitatively distinct evidentiary layer even where the criminal legal outcome remains contested. Third, the recovery archetype is new: Eisenberg participated in a Mango governance vote, using retained governance tokens to legitimize a settlement where he kept approximately $67M as a self-described "bug bounty." That is neither operator-funded reimbursement nor negotiated return - the protocol's own governance mechanism was the settlement venue.
Confidence per domain, not a single score.
Incident
Attribution
Loss
Recovery
How the incident unfolded
October 11, 2022
Attack: opposing perpetuals + oracle manipulation + treasury drain
Eisenberg funds two accounts with USDC and establishes large opposing MNGO-PERP positions - long on one account, short on the other. He then buys MNGO aggressively on spot markets, inflating the oracle price. As the oracle price rises, the long account's collateral value soars. He borrows essentially all available treasury assets against the inflated collateral and withdraws them. The drain takes place within hours.
Mango Markets post-mortem; on-chain Solana records; governance forum; court record
October 11, 2022
Oracle price collapses; account rendered insolvent
After the assets are withdrawn, the oracle price of MNGO falls back toward market levels. The long account is left as a deeply insolvent position - collateral worth far less than the borrowed assets. The protocol has an unrecoverable bad debt position of approximately the drained amount.
On-chain Solana records; Mango Markets post-mortem
October 13-14, 2022
Eisenberg submits and executes governance settlement
Eisenberg posts a governance proposal to the Mango DAO forum: in exchange for a release from DAO-level legal action, he will return assets to the treasury in excess of approximately $70M USD equivalent in MNGO. The DAO votes to approve the settlement. Approximately $47M in assets is returned.
Mango Markets governance forum; on-chain governance record
October 15, 2022
Eisenberg publicly identifies himself on Twitter
Eisenberg posts on Twitter claiming the attack was "a highly profitable trading strategy" and that all actions were "legal open market actions." He frames the settlement as a legitimate outcome and the retained funds as a bug bounty.
Public Twitter post (widely archived)
December 27, 2022
Arrested; DoJ indictment unsealed
Eisenberg is arrested in Puerto Rico. The DoJ unseals an indictment charging him with commodity fraud, commodity market manipulation, and wire fraud in the Southern District of New York. The CFTC simultaneously announces a parallel civil enforcement action.
DoJ announcement; CFTC announcement; court filing
April 18, 2024
Conviction by jury (SDNY)
A jury convicts Eisenberg on all three counts: commodity fraud (Count 1), commodity market manipulation (Count 2), and wire fraud (Count 3). Sentencing and disgorgement proceedings are stayed pending further proceedings. The conviction is subsequently vacated in its entirety by Rule 29 post-verdict motion on May 23, 2025.
SDNY court record; DoJ announcement (April 18, 2024)
May 23, 2025
Rule 29 motion granted; jury conviction vacated in its entirety
SDNY judge grants Eisenberg's Rule 29 post-verdict motion, vacating all three counts. Commodity fraud (Count 1) and commodity market manipulation (Count 2) are vacated on venue grounds: the government charged in SDNY, but the conduct centered on Mango Markets' DEX infrastructure based in Puerto Rico; these counts could potentially be re-indicted in Puerto Rico federal court. Wire fraud (Count 3) is acquitted on sufficiency grounds: the evidence is found insufficient as a matter of law; double jeopardy attaches and bars retrial on this count. No conviction stands.
SDNY court record; Rule 29 opinion (Kaplan, J.)
December 22, 2025
Government files Second Circuit appeal
The US government files a notice of appeal to the US Court of Appeals for the Second Circuit, challenging the Rule 29 ruling and seeking reinstatement of the jury verdicts. As of August 2026, the appeal is pending. The outcome will determine whether any conviction is restored or the acquittal and vacatur stand.
Second Circuit docket; government notice of appeal
What the evidence shows
Root cause
Oracle price manipulation via self-directed spot trading
Mango Markets used a price oracle that incorporated the protocol's own spot market prices for MNGO. The attacker established large opposing perpetual positions using two accounts, then bought MNGO aggressively in spot markets to inflate the oracle price. The inflated price caused the attacker's collateral to appear many times more valuable than its economic value. This mechanism is confirmed by the attacker's public description, the protocol's post-mortem, and evidence presented at the SDNY trial.
Scale (total drained)
~$116M across treasury assets
Total drained from the Mango Markets treasury corroborated across multiple independent post-mortems and security firm analyses. The figure commonly cited ranges from $114M to $117M; the variation reflects different asset price references at time of drain. Per-asset breakdown across USDC, SOL, mSOL, BTC, USDT, SRM and others is pending independent reconstruction from Solana transaction records.
Attribution
Avraham Eisenberg (indicted 2022, tried 2024; conviction vacated May 2025)
Eisenberg publicly identified himself on Twitter on October 15, 2022, describing the attack as "a legal, highly profitable trading strategy." He was arrested December 27, 2022, in Puerto Rico. The DoJ and CFTC charged him with commodity fraud, commodity market manipulation, and wire fraud. A jury convicted him on April 18, 2024. On May 23, 2025, the SDNY judge granted a Rule 29 post-verdict motion: commodities fraud and manipulation counts (1+2) vacated on venue grounds (re-indictment possible); wire fraud count (3) acquitted on sufficiency (double jeopardy bars retrial). The government filed a Second Circuit appeal on December 22, 2025. No conviction stands as of August 2026.
Recovery
~$47M returned via governance vote; ~$69M net loss
Eisenberg submitted a governance proposal to the Mango DAO on October 13-14, 2022: he would return assets in excess of approximately $70M USD equivalent in MNGO, and the DAO would agree not to pursue criminal charges. The DAO voted to approve the settlement. Approximately $47M in assets was returned. The net loss - funds retained by Eisenberg - was approximately $67-69M. The DAO's agreement not to pursue criminal charges was subsequently found not to bind the DoJ or CFTC, which prosecuted independently.
Governance settlement mechanism
Attacker participated in his own settlement vote
Eisenberg retained MNGO tokens after the exploit (part of his inflated long position). He used those tokens to vote on the governance proposal he submitted, giving him disproportionate influence over the settlement outcome. The DAO approval was a formal on-chain governance action on a public protocol, documented in the governance forum and the on-chain record.
What XemaS found
Mango Markets was a Solana-based decentralized exchange offering spot trading, perpetual futures, and borrowing against collateral. Its MNGO governance token could be deposited as collateral to borrow other assets. The collateral value of any asset, including MNGO, was determined by an oracle - a price feed that incorporated Mango's own spot market prices. In October 2022, MNGO had relatively thin liquidity on those spot markets, meaning a concentrated buyer with enough capital could meaningfully move its oracle price.
Eisenberg's approach did not require exploiting any code path. He opened two accounts, each funded with approximately $5M USDC. The first account took a large MNGO-PERP long position; the second account took the opposing short, making the two positions internally offset. Then he bought MNGO aggressively across spot venues - including Mango's own markets and external exchanges - driving the oracle price from roughly $0.03 to a peak many times higher. The precise peak is PARTIAL in this investigation; sources vary on the exact figure.
As the oracle price soared, the collateral value of the first account's MNGO position inflated in tandem. With paper collateral now many times the economic value of the position, the account was within its borrowing limits - from the protocol's perspective, it was fully collateralized. Eisenberg used that collateral to borrow essentially every liquid asset in the Mango treasury: USDC, SOL, mSOL, BTC, USDT, SRM and others. Each borrowed asset was withdrawn. When the oracle price later fell back, the first account was deeply insolvent - but the borrowed assets were already gone.
Three days later, Eisenberg submitted a governance proposal to the Mango DAO. Its terms: Mango Markets would receive assets in excess of his retained amount back to the treasury; the DAO would agree not to pursue criminal action; Mango would deploy recovered assets to repay bad debt. The vote passed. Approximately $47M returned to the protocol. Eisenberg publicly framed the $67M he retained as a legitimate bug bounty on October 15, 2022.
The DoJ and CFTC took a different view. Eisenberg was arrested in Puerto Rico on December 27, 2022, charged with commodity fraud and commodity market manipulation. His defense - that the attack was legal market activity - was rejected by the jury, who convicted him on all three counts on April 18, 2024. On May 23, 2025, the SDNY judge granted Eisenberg's Rule 29 post-verdict motion, vacating the conviction: commodities charges dismissed on venue grounds (re-indictment possible); wire fraud acquitted on sufficiency (double jeopardy bars retrial). The government filed a Second Circuit appeal in December 2025. No conviction stands as of August 2026. The DAO's agreement not to prosecute did not bind federal authorities; DAO governance has no jurisdiction over federal criminal law.
Where the value went
Capital flowed in two directions: ~$116M out of the Mango treasury across multiple borrowed assets, then ~$47M back via the governance settlement, with ~$69M retained as net proceeds. The recovery was not a return of stolen funds in the traditional sense - it was a DAO-voted settlement with a participant who held governance tokens from the attack. The settlement amount was what the attacker agreed to part with, not what the protocol recovered through enforcement.
| Step | Movement |
|---|---|
| 1 | Two accounts funded with USDC; opposing MNGO-PERP positions established |
| 2 | MNGO spot price driven up through concentrated buying across markets |
| 3 | Treasury assets borrowed and withdrawn using inflated collateral |
| 4 | Assets returned via governance settlement vote |
| 5 | Net proceeds retained by Eisenberg pending DoJ/CFTC enforcement |
Downstream impact
Mango Markets v3
The protocol treasury was drained of essentially all liquid assets. The insolvent position left by the attacker became unrecoverable bad debt. Trading and borrowing were suspended following the incident. Mango Markets eventually relaunched in a revised form with revised collateral and oracle parameters.
MNGO (Mango Governance Token)
MNGO was both the instrument of the attack and the collateral at its center. The token price experienced extreme artificial inflation during the manipulation window and then collapsed. MNGO token holders who voted on the governance settlement did so while Eisenberg held a material stake.
Who was involved
Avraham Eisenberg
Attacker and prosecuted defendant. Publicly self-identified on October 15, 2022; arrested in Puerto Rico December 27, 2022; tried and convicted by jury in the Southern District of New York on April 18, 2024. Rule 29 post-verdict motion granted May 23, 2025: commodities counts vacated on venue (re-indictment possible); wire fraud acquitted on sufficiency (double jeopardy bars retrial). Government filed Second Circuit appeal December 22, 2025; pending as of August 2026. No conviction stands. Attribution rests on self-identification and prosecution record. Note: Eisenberg was separately sentenced in an unrelated criminal matter (May 2025); that case is not arising from the Mango exploit and is not part of this investigation.
Mango Markets DAO
Protocol governance body that voted to approve the settlement terms proposed by Eisenberg. The DAO vote returned approximately $47M to the treasury. The DAO's grant of legal immunity did not bind the DoJ or CFTC, which prosecuted independently. The DAO governance mechanism was the settlement venue.
US Department of Justice / CFTC
Joint enforcement. The DoJ charged Eisenberg with commodity fraud, commodity market manipulation, and wire fraud. The CFTC filed a parallel civil enforcement action for commodity manipulation. The prosecution proceeded independently of the DAO settlement. The prosecution record - indictment, trial, conviction, Rule 29 vacatur, and pending Second Circuit appeal - forms the evidentiary basis for the FORMALLY ALLEGED attribution classification.
Why it matters
Protocol collateral is only as sound as the oracle that prices it. When a protocol uses its own markets to price a collateral asset - particularly one with thin liquidity - anyone with enough capital to move that market can manufacture collateral. No audit would flag the oracle mechanism as a "bug" because it was not a bug; it was a design choice that assumed market depth sufficient to resist manipulation. Users allocating to any protocol where thin-liquidity native tokens serve as collateral should treat the oracle specification as a core risk parameter, not a background assumption.
Evidence table
| Fact | State |
|---|---|
| Root cause: Mango oracle used protocol-internal MNGO market prices | VERIFIED |
| Eisenberg publicly claimed the attack on Twitter (October 15, 2022) | VERIFIED |
| DoJ indictment unsealed December 27, 2022 | VERIFIED |
| Jury conviction on April 18, 2024 (SDNY) | VERIFIED |
| Rule 29 post-verdict motion granted May 23, 2025: all three conviction counts vacated | VERIFIED |
| Government filed Second Circuit appeal December 22, 2025 | VERIFIED |
| CFTC civil action filed alongside DoJ charges | VERIFIED |
| Total assets drained approximately $116M | PARTIAL |
| Governance settlement returned approximately $47M | PARTIAL |
| Mango v3 program address: mv3ekLzLbnVPNxjSKvqBpU3ZeZXPQdEC3bp5MDEBG68 | PARTIAL |
What was not visible
Per-asset treasury breakdown not independently reconstructed
The ~$116M total is corroborated across post-mortems. The breakdown across USDC, SOL, mSOL, BTC, USDT, SRM and other deposited assets requires reconstruction from Solana transaction records and is not yet independently verified. The per-asset split carries post-mortem provenance at this stage.
MNGO oracle price peak is PARTIAL
The peak oracle price that MNGO reached during the manipulation varies across post-mortem sources. This investigation does not assert a specific peak price; the mechanism (thin-liquidity spot manipulation inflating the oracle) is VERIFIED, but the exact price level during the attack window is pending independent Solana on-chain reconstruction.
Eisenberg's Solana account addresses pending XemaS verification
The specific Solana wallet addresses used by Eisenberg (the two accounts established for the opposing perpetual positions) are documented in court filings and post-mortems. They have not been independently verified in XemaS and are not yet included as confirmed perpetrator addresses in the canonical evidence record.
Mango v3 program address is PARTIAL
The program address mv3ekLzLbnVPNxjSKvqBpU3ZeZXPQdEC3bp5MDEBG68 is referenced across security analyses. XemaS has not independently verified it on-chain. Verification would confirm this is the specific program that controlled the drained treasury vaults and is the correct canonical subject for this incident record.
Fraud conviction vacated May 2025; legal outcome unresolved pending Second Circuit appeal
Eisenberg's April 2024 jury conviction was vacated in its entirety by the SDNY judge on May 23, 2025 (Rule 29 post-verdict motion). Commodity fraud and commodity market manipulation counts dismissed on venue grounds - these could be re-indicted in Puerto Rico federal court. Wire fraud acquitted on sufficiency - double jeopardy bars retrial on this count. The government filed a Second Circuit appeal December 22, 2025; as of August 2026, the appeal is pending. This investigation classifies Eisenberg as FORMALLY ALLEGED, reflecting the current evidentiary state: strong identity attribution (self-identified, prosecuted, tried) with no standing criminal conviction.
DAO settlement does not bind federal prosecution
The Mango DAO vote included language that the DAO would not pursue criminal action against Eisenberg. This is a legal boundary that this investigation notes as context, not legal advice: federal criminal authorities (DoJ, CFTC) are not parties to a DAO governance vote, and the subsequent prosecution proceeded independently of the settlement. This investigation does not characterize the settlement's legal effect.
What this incident teaches
An oracle that uses your own markets can be manipulated by anyone with enough capital
Mango's oracle for MNGO incorporated prices from Mango's own spot markets. In any market with finite depth, a concentrated buyer can move the price. The cost of manipulation is bounded by the available liquidity, not by protocol security. Any protocol using an internal market price as an oracle for a collateral asset must treat the cost of manipulating that price as the effective attack cost - not the code review coverage. When the token has thin liquidity, the attack cost may be a fraction of the exploitable value.
Economic design failure is not detectable by security audit
Every code path Eisenberg used executed correctly. No overflow, no reentrancy, no unauthorized access, no missing check. A full security audit of Mango's code would not have flagged this vulnerability because it was not a code vulnerability. The oracle specification, the collateral model, and the borrowing mechanism interacted in a way that created exploitable economic behavior. This class of risk requires economic auditing - stress-testing the incentive model, not just the execution correctness.
Governance as settlement venue does not bind prosecution
Eisenberg used the DAO's own governance mechanism to settle the dispute on terms he proposed, with his own governance tokens as part of the vote. The DAO agreement to grant immunity had no legal force over the DoJ or CFTC. Protocol teams and legal counsel should be explicit with communities: a governance vote does not settle criminal liability, because a DAO is not a signatory to a criminal plea agreement. Communities can choose to accept a settlement; they cannot grant immunity from federal law.
Formal prosecution is a distinct attribution pathway from intelligence attribution
Ronin and Harmony are attributed based on US government intelligence (OFAC designation, FBI statement). Eisenberg is attributed based on formal prosecution: self-identification, arrest, indictment, trial. The Mango case demonstrates that a prosecution record - even where the criminal legal outcome is contested (conviction vacated May 2025, appeal pending) - creates an attribution layer that is qualitatively distinct from intelligence designation. Attribution certainty (who did this) and legal determination of criminal liability (guilty of which charge) are distinct questions that the Mango case holds simultaneously. The prosecution record is part of the public evidentiary archive regardless of the final legal outcome.
Structurally related incidents
Relationships derived from shared taxonomy - mechanism, failure pattern, protocol family, and attribution class.
Scan any address with the same evidence engine
EVM, Solana, Bitcoin, and Tron. Every scan returns verified evidence, not a traffic-light score.
Scan a token or walletNo account required for a first scan.