CryptoSlate
Edel, a DeFi lending protocol that accepts tokenized equities as collateral, disclosed roughly $403,000 in losses from an exploit that hit the wrapper and oracle layers of its tokenized Google stock. The attacker manipulated the exchange rate between wGOOGLx, a wrapped version of Edel's tokenized Google share, and the underlying GOOGLx, inflating the collateral value by roughly 78x before borrowing against it. The stolen funds included 384,215 USDC plus wrapped positions in SPYx, QQQx, MSTRx, NVDAx, and TSLAx. Security firms put the headline number differently: Cyvers cited about $353,000, GoPlus about $403,000 in losses and roughly $305,000 in attacker profit, and CertiK about $204,000 drained, with the gap reflecting different measurements of bad debt, gross loss, and net profit.
Edel said no depositor would bear losses. The team will absorb the bad debt, restore affected balances one-to-one, and rebuild the oracle architecture for a version two release. SlowMist traced the root cause to Edel's price source, which used latestAnswer() to read the ERC-4626-style vault's convertToAssets() rate. That conversion rate can be moved by an attacker who controls enough of the underlying flow. GoPlus noted the attacker used a flash loan to repeatedly supply and borrow, distorting the wGOOGLx/GOOGLx conversion rate, and CertiK described the same flaw from the lending side: the inflated wGOOGLx collateral then supported real borrowed assets.
Why it matters
The novelty is the asset class, not the technique. Flash loans, ERC-4626 exchange-rate attacks, and oracle manipulation have shown up in DeFi exploits for years; what Edel adds is a wrapper built around a tokenized equity, which introduces a second pricing problem on top of the stock itself. A lending market now has to price the equity, the wrapped version on top of it, the vault's convertToAssets rate, and the oracle path that reports a value. Alphabet's share price did not move during the exploit. The disconnect between the issuer-level backing and the on-chain pricing is the gap the attacker walked through.
Tokenized stocks have grown quickly into the collateral lane. RWA.xyz puts tokenized stocks' onchain value at $1.7 billion, with monthly transfer volume at $8.92 billion and over 396,000 holders. xStocks lists more than 100 stocks and ETFs across 50+ platforms with $25 billion in total transaction volume.
Frequently asked questions
-
What exactly was exploited in the Edel incident?
The exchange rate between wGOOGLx and the underlying GOOGLx token was manipulated using a flash loan, pushing the wrapped token's collateral value to roughly 78x its correct level before real assets were borrowed against it.
-
Did Alphabet's share price move during the exploit?
No. The flaw sat in the wrapper and oracle layers Edel used to price its tokenized Google stock, not in Alphabet's share price itself.
-
How much was lost and who is covering it?
Security firms reported figures ranging from about $204,000 to $403,000 depending on whether bad debt, gross loss, or net attacker profit was measured. Edel said no depositor bears losses and the team will absorb the bad debt one-to-one.
-
Why is this exploit different from earlier DeFi oracle attacks?
The underlying techniques (flash loans, ERC-4626 rate manipulation) are familiar. The novelty is the asset class: wrapped tokenized equities introduce a second pricing layer on top of the share itself, and Edel appears to be the first clear tokenized-stock-collateral exploit on record.
-
How big is the tokenized-stocks market now?
RWA.xyz puts tokenized stocks' onchain value at $1.7 billion, with monthly transfer volume of $8.92 billion and over 396,000 holders. xStocks alone lists more than 100 stocks and ETFs across 50+ integrated platforms.
CoinDesk
TheBlock
WuBlockchain