Inverse Finance 02 April 2022

**Executive Summary:** On 2022-04-02 the Inverse Finance protocol was exploited for ~\$14.5M after an attacker manipulated INV pricing on low-liquidity SushiSwap and abused a TWAP-based oracle (Keep3rV2Oracle) to mint inflated XINV value and over-borrow assets (1588 ETH, 94 WBTC, ~4M DOLA, 39 YFI); the attacker used an attacker contract, avoided flash-loan detection by deploying capital, and laundered proceeds via multiple Tornado Cash transactions.