Edel Finance's lending protocol was exploited Tuesday after an attacker inflated the value of tokenized Google stock used as collateral to approximately 78 times its real price, enabling unauthorized borrowing that left roughly $403,000 in bad debt.
Market Context
The exploit targeted Edel Lending's version-one contracts, which accepted wGOOGLx—a wrapped form of the tokenized share GOOGLx—as collateral for loans. Tokenized equities represent one of DeFi's fastest-growing segments, bringing traditional stocks onchain and adding conversion layers between assets and their price feeds.
Analysis
Unlike most DeFi exploits that target faulty price oracles, this attack exploited how the protocol handled conversions between GOOGLx and its wrapped counterpart wGOOGLx. The attacker manipulated the exchange rate so that wGOOGLx collateral was valued at roughly 78 times what it should have been, allowing them to borrow real assets against phantom collateral while Chainlink oracles correctly reported Alphabet's share price at around $357.
Edel detected and contained the exploit quickly, pausing all version-one contracts which remain frozen. The team traced the attacker's transactions and is coordinating with exchanges, while offering a white-hat settlement that would allow return of most funds in exchange for a fee and no legal pursuit within a set window. Crucially, Edel said no depositor will take a loss, with the team absorbing all bad debt and restoring balances one for one.
The method represents one of DeFi's most persistent exploit categories. Oracle price manipulation ranks as the second most common smart-contract vulnerability in the OWASP Smart Contract Top 10 vulnerabilities for 2025, and security researchers at CertiK describe it as one of the field's most common attack vectors—where code works as written but pricing can be gamed.
Key Numbers
- Collateral inflation: roughly 78x true value (7,700% increase)
- Bad debt created: approximately $403,000
- Chainlink oracle price for Google shares: around $357 per share
- Protocol version affected: Edel Lending v1 (now frozen)
What to Watch
Edel's deployment of a redesigned version-two system with a new pricing setup meant to block this type of manipulation. The team's promised full technical breakdown will reveal the exact mechanism of the wrapping exploit. Any response from the attacker regarding the white-hat settlement offer, and whether exchanges are able to freeze associated funds, will be critical indicators of recovery potential for similar protocols.