Mango Markets froze v3 after price manipulation drained its liquidity

Mango Markets froze its version 3 program on October 12, 2022 after two accounts used a rapid increase in the price of its MNGO token to expand one account’s apparent collateral value and withdraw most of the crypto assets available from the Solana-based trading and lending protocol.

Mango’s event-day account placed the beginning of the incident at approximately 22:00 UTC on October 11. At 02:37 UTC on October 12, program instructions were frozen to prevent further interaction, including deposits that might not be recoverable. Users with existing deposits could not withdraw their assets.

The project estimated the net value extracted at approximately $100 million at the time. That was Mango’s contemporaneous valuation of multiple crypto assets, not a cash amount or an independently reconciled figure.

How the accounts converted a price move into borrowing power

According to Mango’s October 12 explanation, two accounts funded with USDC established an unusually large position in MNGO perpetual futures. One account held the long side while the accounts traded against each other.

Mango said MNGO/USD prices on FTX and AscendEX then rose between fivefold and tenfold within minutes. Price feeds supplied by Switchboard and Pyth consequently marked MNGO above $0.15. The higher reference price increased the unrealized value of the long MNGO perpetual-futures position recorded inside Mango.

The account could then treat that mark-to-market gain as borrowing capacity. It withdrew assets including USDC, USDT, SOL, mSOL and wrapped bitcoin from the protocol. Mango said the withdrawals exhausted the borrowing liquidity available from deposits it valued at approximately $190 million before the incident.

Those figures described the project’s first reconstruction. They did not establish that $190 million in deposits was equivalent to immediately realizable cash, nor that every withdrawn token retained its reported dollar value. Crypto prices move continuously, and the basket was transferred across multiple transactions.

The oracle distinction

Mango’s team said the oracle providers were not malfunctioning. In its account, the feeds reported prices observed on their source markets as designed; the weakness was that a thinly traded token could be moved sharply enough on those markets to affect collateral values inside the protocol.

That distinction mattered. The incident did not require a false price to be inserted directly into an oracle. Instead, genuine trades influenced the external markets sampled by the feeds, and Mango’s risk parameters accepted the resulting price quickly enough for the inflated position to support withdrawals.

The project’s explanation was a contemporaneous claim by the affected protocol, corroborated in broad outline by independent security analysis and later government filings. Coinburn did not independently replay every trade, oracle update or withdrawal for this reconstruction.

Why the freeze mattered

The October 12 shutdown turned a trading anomaly into a protocol-wide solvency and governance crisis. Mango described the result as a total draining of available equity and made preservation of remaining assets, depositor recovery and possible rebuilding its immediate priorities.

The episode exposed the combined risk of thin spot liquidity, leveraged perpetual positions, cross-market oracle inputs and permissive collateral limits. Each component could operate according to its rules while their interaction produced losses far larger than the capital initially used to move MNGO.

It also complicated the familiar distinction between a software exploit and market manipulation. No event-day court or regulator had determined what laws applied, and the identity of the account controller was not yet established publicly on October 12. Descriptions such as “attacker” or “hacker” were contemporaneous characterizations, not adjudicated findings.

Later context

In January 2023, the Commodity Futures Trading Commission and Securities and Exchange Commission filed civil complaints naming Avraham Eisenberg and alleging manipulation. The agencies used totals ranging from more than $110 million to approximately $116 million. Those later allegations clarify the mechanics and explain why surviving valuations differ, but they were not available on October 12, 2022 and are not presented as event-day findings.