Connect with us

Crypto World

Moonwell’s ‘vibe-coded’ oracle in $1.8M blowup

Published

on

Moonwell's 'vibe-coded' oracle in $1.8M blowup

It was only a matter of time before “vibe-coded” smart contracts led to a significant loss of funds and on Sunday, an oracle misconfiguration led to users of DeFi lending platform Moonwell being liquidated for a total of 1,096 Coinbase Wrapped Staked Ether (cbETH).

The protocol was also saddled with $1.8 million worth of bad debt as a result.

The error was introduced in pull request 578, submitted by Moonwell core contributor “anajuliabit” and co-authored by Claude Opus 4.6.

Including this incident, Moonwell has suffered three oracle malfunctions in the past six months, leading to over $7 million in bad debt.

Advertisement

Read more: Claude AI plugins can now vibe code smart contracts

cbETH = $1.12

Moonwell’s post-mortem report states that, this time, the issue lies in calculating the dollar price of cbETH.

Advertisement

“The oracle used only the raw cbETH/ETH exchange rate. This misconfiguration caused the oracle to report cbETH’s price as approximately $1.12 (reflecting the cbETH/ETH ratio of ~1.12) rather than the intended market value of roughly $2,200,” the report explains.

As a result, the error “wiped out most or all of the cbETH collateral for many borrowers.”

A total of 1,096 cbETH was liquidated. In turn, $1.78 million worth of bad debt was generated for the protocol.

Monitoring systems picked up the discrepancy and strict borrow and supply caps were set to prevent further interaction.

Advertisement

Despite this, liquidation of existing positions continued. Any oracle correction requires “a five-day governance voting and timelock period, which could not be bypassed.”

Trading Strategy’s Mikko Ohtamaa pointed out that “regardless of whether the code is written by an AI or by a human, these kinds of errors are caught in an automated integration test suite.”

He highlights that Claude can even write these tests itself, but that in this case “there was no test case for price sanity.”

Others highlighted the contributor’s GitHub profile which shows an extremely high workrate, over 1,000 commits in the past week.

Advertisement

Read more: Clawdbot creator Peter Steinberger: ‘Crypto folks, stop harassing me’

The dark side of the moon

Moonwell is a lending protocol active on the Base, Optimism, and Moonbeam networks. It holds around $90 million in total value locked (TVL), according to DeFiLlama data, down from a peak of $380 million in August last year.

Since then, the project has suffered a number of hiccups.

DeFi commentary account “Yieldsandmore” details two further incidents in recent months. The first came during last year’s infamous October 10 crash, when a pricing discrepancy between Chainlink feeds and decentralized exchanges on Base led to $12 million in liquidations and $1.7 million of bad debt.

Advertisement

The second came less than a month later, on November 4, when the $129 million Balancer hack had a knock on effect on Moonwell’s market-based wrsETH/ETH oracle, leading to $3.7 million of bad debt.

The two incidents were apparently exploited by the same attacker, who is “clearly constantly scanning Moonwell for extractable value.”

Previously, 2022’s $190 million Nomad Bridge hack devastated the protocol’s Moonbeam deployment, its sole instance at the time.

The incident saw TVL drop 80%, from over $100 million to just $21 million.

Advertisement

Got a tip? Send us an email securely via Protos Leaks. For more informed news, follow us on XBluesky, and Google News, or subscribe to our YouTube channel.

Source link

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

The Protocol: Zora moves to Solana

Published

on

The Protocol: Zora moves to Solana

Network News

ZORA MOVES FROM BASE TO SOLANA: On-chain social platform and decentralized protocol Zora is making a decisive shift beyond its non-fungible tokens (NFT) and creator roots with the launch of “attention markets” on Solana, a product that allows users to trade tokens tied to internet trends, memes and cultural moments. The feature, unveiled Feb. 17, lets anyone create a new market for 1 SOL. Once live, users can buy and sell positions on whether a topic will gain or lose traction across social media. Instead of wagering on elections or macro data, traders speculate on buzz itself — such as hashtags, viral narratives, even broad themes like “AI girlfriend” or “bitcoin.” The design leans heavily into Solana’s strengths. Fast block times and low transaction costs make it easier to support rapid price updates and frequent trading, which are essential for markets built around fleeting online momentum. Initial activity was limited, however. The primary “attentionmarkets” token briefly touched roughly $70,000 in market capitalization, with around $200,000 in trading volume. Most other trend markets struggled to attract meaningful liquidity, with few crossing the $10,000 mark on their first day. Percentage swings were sharp, though largely driven by thin order books rather than sustained demand. Zora was among the breakout applications on Coinbase’s Layer 2 Base network in the past few years. It launched its ZORA token there in April and helped roll out Creator Coins tied to Base profiles in July, a push that briefly helped Base overtake Solana in daily token creation. Creator coins are tokens tied to an individual creator’s online profile, brand or community. Think of them as tradable “shares” in a person’s internet presence. On platforms like Zora and Base, a creator coin could be automatically generated from a user’s profile. Fans could buy the coin to signal support, gain social clout, or speculate that the creator’s popularity would grow. As more people bought in, the price could rise, and interest faded, it could fall. As such, some in the Base community saw the new “attention markets” product as a pivot away from that momentum. — Shaurya Malwa Read more.

EF EXECUTIVE-DIRECTOR TO LEAVE: Tomasz Stańczak, co-executive director of the Ethereum Foundation (EF), announced he will step down from his leadership role at the end of February 2026, marking a notable shift in the organization’s executive team. Stańczak, who has co-led the foundation alongside Hsiao-Wei Wang since early 2025, said in a blog post that he believes the foundation and the broader Ethereum ecosystem are “in a healthy state” as he prepares to hand over the reins to Bastian Aue, who will take the co-executive director role alongside Wang. Stańczak’s tenure began at a turbulent time for the EF. He was brought aboard following the transition of long-time executive director Aya Miyaguchi into a new leadership position amid mounting community criticism that the foundation wasn’t doing enough to aggressively push the Ethereum ecosystem forward. At the time, detractors pointed to a perceived disconnect between the EF and developers, including conflicts of interest, clashes over strategic direction and frustrations about ETH’s price performance. Such criticisms helped spur a broader leadership restructuring. While Stańczak stressed his confidence in the team’s ability to carry forward the EF’s mission, he also signaled his intention to remain involved in the ecosystem. — Margaux Nijkerk Read more.

XRP LEDGER RELEASES MEMBER-ONLY DEX: The XRP Ledger has activated a new “Permissioned DEX” amendment, a technical upgrade designed to let regulated institutions trade on XRPL without opening markets to everyone. The change, known as XLS-81, allows the creation of permissioned decentralized exchanges that work like XRPL’s existing built-in DEX, but with a key difference. A permissioned domain can restrict who can place offers and who can accept them, creating a gated trading venue where participation is tied to compliance requirements such as KYC and AML checks. Think of it as a ‘members only’ marketplace, while still keeping the trading mechanics native to the ledger. The feature is aimed at banks, brokers and other firms that may want onchain settlement and liquidity but cannot interact with fully open DeFi markets. For these players, the ability to control access is not optional; it is a minimum requirement. The activation also adds to a growing set of “institutional DeFi” primitives XRPL has been rolling out this month. Token Escrow, or XLS-85, went live last week, extending XRPL’s native escrow system beyond XRP to all trustline-based tokens and Multi-Purpose Tokens, including stablecoins such as RLUSD and tokenized real-world assets. — Shaurya Malwa Read more.

ETHEREUM MEMBERS REVIVE NEW VERSION OF THE DAO: In the summer of 2016, the Decentralized Autonomous Organization, known as the DAO, became the defining crisis of Ethereum’s early years. A smart contract exploit siphoned millions of dollars’ worth of ether (ETH) from that initial project, and the community’s response — a contentious hard fork to recover those funds, splintered the original chain from the current one, leaving the old chain behind, known as Ethereum Classic. The DAO was once the greatest crowdfunding effort in crypto’s history, but faded into a cautionary tale of governance, security, and the limits of “code is law.” Now, nearly a decade later, that story has taken an unexpected turn. What was lost, or rather, left untouched, is being repurposed as a ~$150 million (at today’s prices) security endowment for the Ethereum ecosystem. The endowment, now known as TheDAO Security Fund, will stake some of the 75,000 dormant ether (ETH) and deploy the yield through community-driven funding rounds to support Ethereum security research, tooling and rapid-response efforts, while keeping claims open for any remaining eligible token holders. At the center of this story is Griff Green, one of the original DAO curators and a veteran of Ethereum decentralized governance. “When the DAO hack happened [in 2016], obviously, I jumped into action and basically led everything but the hard fork,” Green said of assembling the white hat group that rescued funds on the original Ethereum chain. “We hacked all these hackers. It was straight up DAO wars”. That effort, alongside others, helped salvage funds that might otherwise have been lost forever. At the time, the hard fork restored roughly 97% of the DAO’s funds to token holders, but left a small fraction, roughly 3%, in limbo. These “edge case” funds came from quirks of the original smart contracts: people who paid more than expected, those who burned tokens to form sub-DAOs, and other anomalies that didn’t cleanly map back. Over time, that leftover balance, once only worth a few million, ballooned into something far more significant due to ether’s appreciation. “The value of the funds we control has grown dramatically… well over 75,000 ETH,” a blog post for the new DAO fund states. — Margaux Nijkerk Read more.

Advertisement

In Other News

  • A recent poll of 1,000 American investors in digital assets found that over half are scared they’ll face an IRS tax penalty this year as new transparency rules governing crypto exchanges take effect. The data collected at the end of January by crypto tax platform Awaken Tax canvassed U.S. holders’ concerns about a radical shift from self-disclosure to automatic reporting of transactions. This has been enacted through the introduction of the “Digital Asset Proceeds From Broker Transactions,” or Form 1099-DA, which tens of millions of Americans will be made aware of over the next month or so. The new rules are designed to clamp down on crypto tax evasion and compel brokers, such as crypto exchange Coinbase (COIN), to report all sales and exchanges of digital assets that occurred in 2025 to the tax agency. The aim is to give tax authorities a clear view of investor gains and losses by opening up customer data inside exchanges for the first time, allowing the IRS to compare what crypto brokers report with what taxpayers file. While the goal is to remove any margin of error, the rules are a “blunt instrument,” created by legislators who know nothing about crypto, according to Awaken Tax founder Andrew Duca. “It means crypto is being treated like stocks, but it doesn’t behave in that way. Real crypto users will move assets between multiple wallets and interact with decentralized finance (DeFi) protocols, using pretty complex trading strategies,” Duca said. — Ian Allison Read more.
  • Crypto venture firm Dragonfly Capital completed a $650 million fourth fund, marking one of the largest raises in the sector at a time when many blockchain-focused VCs are struggling, Managing Partner Haseeb Qureshi said. “It’s a weird time to celebrate,” Qureshi wrote on a social media post, describing low spirits and “the gloom of a bear market” for crypto. However, he noted that Dragonfly has historically raised capital during downturns, including the 2018 ICO crash and just before the 2022 Terra collapse, ‘vintages,’ he said, ultimately became the firm’s best performers. In September, the firm said it aimed to raise $500 million for its fourth fund, targeting early-stage projects. It has not yet identified any of them. In May 2023, Dragonfly Capital raised $650 million for its third crypto fund for later-stage companies. — Olivier Acuna Read more.

Regulatory and Policy

  • Hyperliquid (HYPE), a blockchain-based exchange that processed more than $250 billion in perpetual futures trading last month, has launched a U.S. lobbying and research arm to shape how lawmakers regulate decentralized finance (DeFi). The Hyperliquid Policy Center, a Washington, D.C.-based nonprofit, will focus on regulatory frameworks for decentralized exchanges, perpetual futures and blockchain-based market infrastructure, according to a press release. Jake Chervinsky, a prominent crypto lawyer and former policy head at the Blockchain Association, will serve as founder and CEO. The launch comes as Congress and federal agencies debate how to oversee crypto trading platforms and derivatives markets. Perpetual futures, which allow traders to hold leveraged positions without an expiration date, are widely used on offshore venues but remain a gray area under U.S. law. The arrival of a new group also represents just the latest entrant into a Washington crypto-policy scene that’s jammed with similar organizations, including the DeFi Education Fund and Solana Policy Institute, in addition to the broader groups such as the Digital Chamber, Blockchain Association and Crypto Council for Innovation. And the new organization lands as negotiation is well underway on Senate legislation that may set U.S. DeFi policy. — Kristzian Sandor Read more.
  • The legal challenges from state governments against certain aspects of prediction markets such as Polymarket and Kalshi received a sharp rebuke from U.S. Commodity Futures Trading Commission Chairman Mike Selig, who is arguing that his federal agency has jurisdiction, not the states. “To those who seek to challenge our authority in this space, let me be clear: we will see you in court,” Selig said in a video statement posted on social media site X. He said his agency filed a legal brief in court to back up the federal role as the leading regulator over this corner of the derivatives markets. “The CFTC has regulated these markets for over two decades,” he said. “They provide useful functions for society by allowing everyday Americans to hedge commercial risks like increases in temperature and energy price spikes; they also serve as an important check on our news media and our information streams.” — Jesse Hamilton Read more.

Calendar

Source link

Continue Reading

Crypto World

$50,000 Price Odds Remain As 2024 Hodlers Help Stabilize BTC

Published

on

$50,000 Price Odds Remain As 2024 Hodlers Help Stabilize BTC

Two-year Bitcoin hodlers “absorbed” seller pressure in recent weeks, according to new research, but most analysts still expect new macro BTC price lows.

New analysis suggests that Bitcoin (BTC) is “relying” on early 2024 buyers as its price action stalls below $70,000.

Key points:

Advertisement
  • Bitcoin buyers from early 2024 are in focus as a giant potential safety net for BTC price.

  • Their cost basis extends down to $60,000, and a major capitulation has not yet happened.

  • New macro BTC price lows remain a popular near-term bet.

2024 Bitcoin hodlers have “absorbed” new sellers

In the latest edition of its weekly newsletter, “The Week Onchain,” crypto analytics platform Glassnode said that BTC price was in a “dense demand zone.”

As BTC/USD treads water around 45% below its October 2025 all-time highs, buyers from long before that event are holding up the market.

Their importance has become much more noticeable since Bitcoin dropped below its true market mean price near $80,000.

“A closer inspection of price behavior since the breakdown below the True Market Mean indicates that downside pressure has largely been absorbed within a dense demand zone between $60k and $69k,” Glassnode summarized. 

Advertisement

“This cluster was primarily established during the H1 2024 consolidation phase, where investors accumulated within a prolonged range and have since held their positions for over a year.”

Bitcoin long-term holder cost basis distribution heatmap. Source: Glassnode

Researchers referenced the seven-month consolidation structure that characterized much of 2024, and which itself placed old all-time highs of $69,000 from late 2021 in focus.

Now, those buyers face falling into unrealized loss, but are so far avoiding capitulation.

“The positioning of this cohort near breakeven levels appears to have moderated incremental sell pressure, contributing to the development of another sideways structure since late January 2026,” “The Week Onchain” continued. 

“The defense of the $60k–$69k range suggests that medium-term holders remain resilient, allowing the market to transition from impulsive decline into range-bound absorption.”

Bitcoin realized profit/loss ratio. Source: Glassnode

New BTC price lows in “next week or so?”

The presence of hodler resilience comes at a crucial time as market participants still expect new macro lows to come next.

Related: Bitcoin price ignores $168M Strategy BTC purchase as Iran tensions escalate

As Cointelegraph reported, Bitcoin traders have little faith in the current range holding as support, with $50,000 now a popular target.

Advertisement

“Expected a quick bounce to reset indicators then straight back down. I still believe 52-53k is coming in the next week or so,” one such forecast from trader Roman stated this week.

BTC/USDT four-hour chart with RSI, MACD data. Source: Roman/X

An accompanying chart suggested that the indicator “reset” would affect the relative strength index (RSI) and moving average convergence/divergence (MACD) on four-hour time frames.

Earlier, Cointelegraph noted rare lows for weekly RSI, with analysis hinting that such levels were a once-per-cycle phenomenon.