ElevateFi Staking Vault Spot-Price Oracle Manipulation

Using flash-loan-funded buying pressure against the EFI/DAI pair, the attacker temporarily inflated the vault's reserve-based oracle, booked $2.5 million of fake staking principal through repeated stake calls, and then claimed 6,256.5334 EFI worth about $25,000 after the price normalized.