What Is an Oracle?
An oracle feeds outside information onto a blockchain. Chains are sealed rooms: contracts cannot see prices, weather, or anything off-chain on their own. Oracles carry the news in, and virtually all of DeFi runs on the prices they deliver. Chainlink is the dominant network.
How It Actually Works
- Decentralized oracle networks aggregate prices from many independent nodes and sources, publishing a consensus feed on-chain that contracts read.
- Lending protocols use feeds to value collateral and trigger liquidations. DEXs, derivatives, and stablecoins all consume them.
- The design goal is making any single lie expensive: many nodes, many sources, staked penalties for feeding garbage.
Oracle Manipulation, the Classic DeFi Heist
If a protocol reads its price from one thin source, an attacker can move that source and harvest the consequences: pump a token's price on a shallow pool, borrow against it at the inflated valuation, walk away with real assets, often inside a single transaction using a flash loan. Nine-figure exploits have followed this recipe. Robust protocols use time-weighted, multi-source feeds precisely to price this attack out of reach.
Risks and Common Mistakes
- Depositing into yield protocols without asking what oracle values the collateral. One thin feed makes the whole vault someone's future press release.
- Assuming a big TVL implies robust oracles. Size and plumbing quality are different questions; see TVL.
- Oracle failure during chaos: flash crashes and stale feeds have liquidated positions at prices that briefly existed nowhere.
When It Matters
Every DeFi deposit inherits its protocol's oracle risk. It is one of the quiet questions on the checklist in my DeFi page: where does the price come from, and how hard is it to lie to?
Related Terms
Glossary · Learn · Resource Library · Home