Moonwell pricing glitch lets liquidators seize millions in cbETH collateral
Incident overview: A configuration mistake in Moonwell's price feed caused the protocol to value cbETH at near a dollar rather than its market level, creating a short-lived but destructive pricing distortion. Liquidation algorithms reacted to the skewed inputs, allowing third parties to repay tiny debts and claim full collateral positions at fire-sale effective prices. In total, automated actors seized just over 1,096.317 cbETH, a position the risk firm later marked as equivalent to about $2.44M at expected market parity.
Mechanics and immediate effects: The bug stemmed from an update that used cbETH’s peg to ETH without coupling that ratio to ether’s dollar value, producing an artificial per-token quote near $1.12. Because automated liquidators operate on-chain and in milliseconds, they executed at the defective price, converting protocol collateral into realized losses while borrowers were left with outstanding deficits. Moonwell attempted rapid mitigation by cutting supply and borrowing caps, but a pending governance step plus a mandatory five-day timelock prevented an instant correction.
Wider context and consequences: The event produced roughly $1.78–$1.8M of bad debt on Moonwell’s books as markets and maintainers reconciled the mismatch. Debate flared about development practices after observers connected some code commits to an AI coding assistant, prompting fresh scrutiny of automated code contribution in security-sensitive DeFi components. The episode reinforces that oracles and protocol governance choices are primary attack surfaces; fixes will likely involve layered sanity checks, faster emergency controls, and greater transparency around code provenance.
Read Our Expert Analysis
Create an account or login for free to unlock our expert analysis and key takeaways for this development.
By continuing, you agree to receive marketing communications and our weekly newsletter. You can opt-out at any time.
Recommended for you
WLFI Plunge Preceded $6.93B Crypto Liquidation, Amberdata Says
Amberdata finds the Trump-linked WLFI token collapsed more than five hours before a rapid marketwide sell-off that produced roughly $6.93 billion in liquidations. The study links a concentrated holder base and extreme leverage to a collateral-driven cascade that pushed Bitcoin down ~15% and Ether ~20%.
Silo v3 Introduces Protocol-Level Liquidation Path to Shield Lenders
Silo launched Silo v3 , adding a protocol-controlled liquidation route that absorbs collateral into debt positions when onchain DEX liquidity is insufficient. The change aims to widen acceptable collateral types while explicitly compensating lenders via discounts and fees, reshaping DeFi credit dynamics.
Bithumb glitch briefly distributed roughly $40bn in bitcoin to users
A technical error at South Korean exchange Bithumb mistakenly credited customers with large bitcoin amounts instead of a small cash reward, briefly inflating balances by about $40bn. The platform restricted accounts, recovered nearly all the tokens, and is facing scrutiny from the Financial Supervisory Service while promising compensation and system upgrades.
Binance says massive October liquidations flowed from macro shock, not platform failure
Binance attributes the October 10 market collapse to a sudden macro risk-off move that collided with high leverage and evaporating liquidity, rather than a core exchange outage, while acknowledging two technical hiccups and having compensated affected users. Separately, recent intra-day interventions by major players — including reserve conversions and explicit buy commitments — illustrate how firms have moved to provide temporary liquidity backstops during similar stress episodes, underscoring both the value and limits of such measures.
Balancer Labs shutters as $110M exploit forces radical protocol overhaul
Balancer Labs will close after a $110M November exploit triggered legal exposure and an aggressive restructuring of token emissions, fees, and treasury capture. The DAO proposes zero emissions, 100% treasury revenue, a BAL buyback, and a narrowed product focus to stabilize liquidity and offer holders exit options.
Resolv Labs' USR Depegs After 80M Tokens Minted in Exploit
Resolv Labs' algorithmic stablecoin USR was inflated by roughly 80 million tokens in an exploit that yielded about $25 million in onchain proceeds. The flaw appears tied to privileged access controls and missing mint safeguards, producing immediate market dislocation and amplified lending contagion risk.
CFTC staff prescribes haircuts, reporting and limits for crypto used as derivatives collateral
CFTC staff published an operational FAQ that prescribes specific capital haircuts (20% for proprietary bitcoin/ether, 2% for approved payment stablecoins), mandates a three‑month constrained rollout for firms using the staff no‑action path, and requires weekly position reporting plus monthly DCO stress reviews. The guidance deliberately aligns stablecoin haircut math with recent SEC staff guidance, but it sits alongside Fed and other agency work that could push uncleared bilateral margin higher — together these signals are likely to shift collateral and leveraged derivatives activity toward cleared, custody‑centric plumbing.
Crypto Fear-and-Greed Index Drops to Record Low as Post-10/10 Liquidations Continue to Weigh
The Crypto Fear-and-Greed Index plunged to an unprecedented 5 after an Oct. 10 forced-liquidation cascade that exposed concentrated leverage and thin liquidity. Short-term panic persists even as institutional allocations and tactical liquidity interventions provide partial, likely temporary, stabilization.