Oracle Manipulation Risk Report: Deribit

Deribit, a leading non-custodial derivatives platform with over $4 billion in total value locked (TVL), faces a high risk of oracle manipulation. The platform relies heavily on price oracles to determine margins, liquidation thresholds, settlement prices, and funding rates for options and futures contracts. Four primary attack vectors were identified to exploit:

1. Centralised feed dependency: Certain assets rely on a single price provider, making them vulnerable to coordinated exchange attacks or insider trading to skew settlement prices. This could result in a 10% profit/loss swing for large positions.

2. TWAP manipulation via flash loans: The platform's funding rate calculation uses a 1-hour time-weighted average price (TWAP) of spot prices. An attacker can flash-loan the underlying asset, trade on a target exchange, and revert, manipulating the TWAP and benefiting from biased funding rates over successive periods.

3. Cross-chain/L2 finality lag: Deribit uses both Ethereum L1 and L2 (e.g., Optimism) price feeds. Delays in finality between L1 and L2 can lead to liquidations being triggered based on stale L2 prices while L1 prices have already corrected, causing collateral losses.

4. Oracle update frequency and gas-price manipulation: Oracle contracts are updated every 30 seconds. An attacker can front-run the update by paying a higher gas price, inserting manipulated prices before legitimate updates are processed, causing immediate price shifts affecting margin calls and funding.

To mitigate these risks, Deribit should prioritize implementing a decentralized, multi-signature oracle update mechanism, such as Chainlink CCIP or Band Protocol. This would enhance the oracle's resilience against manipulation and ensure more reliable price feeds.