Terra sleuth FatMan wrote on Twitter on May 30, "So far, the mBTC, mETH, mDOT and mGLXY pools have been drained. In around 12 hours, the market feed will kick in, and the attacker will be able to drain all of the mAsset pools (such as mSPY and mAAPL, mAMZN, etc.)". He begged Mirror developers to fix the oracle, writing that they are "completely MIA".
Another bug affecting Terra's Mirror Protocol loses the project $2 million (and counting)
Someone has been able to drain more than $2 million from the Mirror Protocol in the Terra ecosystem. It appears they are exploiting an issue with the price oracle for "Luna Classic" (formerly known as Luna, but renamed with the release of Luna 2.0). The oracle seems to be providing an incorrect price for LUNC that is far higher than its price on exchanges. This has allowed a person to use a relatively small amount of LUNC as collateral for loans of much larger amounts in other assets.