DeFi Lending Losses Mount as Collateral Math Becomes the Target

Edel Finance, a decentralized finance (DeFi) lending protocol, halted its first-version contracts after an attacker manufactured roughly $403,000 in bad debt without altering a price feed. As CryptoSlate detailed, the exploit targeted the internal conversion between a tokenized Alphabet share and its wrapped form. By repeatedly redeeming and donating the token back into an ERC-4626 vault, the attacker pushed the vault's assets-per-share ratio from about 6 to nearly 79, then borrowed roughly 384,000 USDC and other wrapped stock tokens against collateral the protocol valued incorrectly. Chainlink's price oracle reported Alphabet's real share price correctly throughout. Edel said it will absorb the losses to fully repay depositors, is building a redesigned version, and has offered the attacker a white-hat settlement, though the funds moved through Tornado Cash.

The pattern of attacking valuation logic rather than external prices extends a broader trend. The security tracker Rekt News has logged recent losses including Secret Network, whose Axelar bridge lost about $4.67 million to an infinite-mint flaw. A modified token contract failed to verify the source of cross-chain messages, which let an attacker running a single-validator chain mint wrapped assets backed by nothing. Smaller incidents at SecondFi and Humanity Protocol complete the week's list.

Physical attacks follow the on-chain ones. French authorities are responding to a rise in kidnappings and coercion aimed at visible crypto holders, which CryptoSlate tied to leaked personal-data trails rather than any wallet vulnerability. The common element is that the weakest layer is rarely the cryptography.