Particle.news
Download on the App Store

Edel Finance Pauses Lending After Wrapped Google Token Mispricing Creates $403K Bad Debt

The firm says a flaw in its wrapping and conversion logic — not Chainlink price feeds — let an attacker inflate wGOOGLx, showing that conversion layers can be exploited even when oracles are correct.

Overview

  • Edel detected and contained the exploit on Wednesday, July 1, after an attacker manipulated the exchange rate between wGOOGLx and GOOGLx so wGOOGLx traded at about 78 times its true value and generated roughly $403,000 in bad debt.
  • Chainlink price feeds were reporting correct Alphabet share prices, and Edel says the failure originated in the protocol’s wrapping/conversion code that translates GOOGLx into its wrapped form wGOOGLx.
  • The team immediately paused and froze all version‑one lending contracts, traced the attacker’s transactions, coordinated with exchanges, offered a white‑hat settlement window, and pledged to restore depositor balances by absorbing the loss.
  • On‑chain metrics captured heavy withdrawals: DeFiLlama data show total value locked fell from about $630,000 to roughly $947 with estimated net outflows near $630,000, which limits lending capacity until deposits and confidence return.
  • The incident highlights a wider risk for tokenized equities because wrapping adds an extra pricing step; security groups such as OWASP and CertiK flag price‑manipulation of derived assets as a top smart‑contract vulnerability and protocol redesigns and flow metrics will indicate whether confidence returns.