How tokenized stocks fail as collateral even when the stock price does not move
DeFi lending protocol Edel disclosed a $403,000 exploit that hit the layer the place tokenized stocks try to turn into DeFi collateral.
Edel stated no depositor would bear losses, and the workforce would soak up the unhealthy debt, restore affected balances one-to-one, and rebuild the protocol’s oracle structure for a model two launch.
The assault manipulated the alternate fee between wGOOGLx, a wrapped model of Edel’s tokenized Google stock, and GOOGLx, the token it wraps. Edel stated the manipulation pushed wGOOGLx’s collateral worth to roughly 78 occasions its appropriate degree.
SlowMist traced the root trigger to Edel’s price supply, which used newestAnswer() to return an ERC-4626-style vault’s convertToAssets() fee. That conversion fee might be manipulated when an attacker controls sufficient of the underlying movement, and Edel’s price feed reads it directly.
CertiK described the identical flaw from the lending aspect: the attacker manipulated wGOOGLx’s collateral price, which tracked its GOOGLx stability, then borrowed towards the inflated worth.
GoPlus famous that the attacker used a flash mortgage to repeatedly provide and borrow, distorting the wGOOGLx/GOOGLx conversion fee. The inflated collateral then supported actual borrowed property, together with 384,215 USDC and wrapped positions in SPYx, QQQx, MSTRx, NVDAx, and TSLAx.
Security companies printed completely different estimates. Cyvers put the loss at roughly $353,000, GoPlus cited about $403,000 in losses and roughly $305,000 in attacker revenue, and CertiK put the drained funds at roughly $204,000.
The hole seems to mirror completely different measurements, together with unhealthy debt, gross loss, and web attacker revenue.
The disconnect in all probability comes from every agency measuring one thing completely different, such as unhealthy debt, gross loss, or web revenue.
The important failure sat in the alternate fee between the wrapped token and its underlying counterpart, a relationship that Edel’s lending market priced as although it had been steady. Alphabet’s share price did not drive the exploit.
The market in numbers
RWA.xyz places tokenized stocks’ onchain value at $1.7 billion, up 2.17% over the previous 30 days. Monthly switch quantity sits at $8.92 billion, and holders at over 396,000.
xStocks alone lists greater than 100 stocks and ETFs throughout greater than 50 built-in platforms, with over $25 billion in complete transaction quantity. It describes itself as absolutely backed and open to plugging into any DeFi protocol with out permission.
Backed, the issuer behind xStocks, markets the tokens explicitly for DeFi use: lending tokenized Apple shares or borrowing towards them with out promoting.
Kamino says it grew to become the first main lending protocol to just accept tokenized equities as collateral, permitting customers to deposit tokens such as SPYx, QQQx, GOOGLx, AAPLx, NVDAx, TSLAx, MSTRx, and HOODx to borrow stablecoins or earn yield.
Robinhood launched stock and ETF tokens for EU prospects in June 2025, then opened a public testnet for Robinhood Chain. The community is an Ethereum layer-2 constructed on Arbitrum, designed round tokenized real-world property together with equities, ETFs, and personal property.
The promoting level throughout all of that is the identical: tokenized stocks ought to move and join like some other crypto asset. Edel is a reminder that when they move like crypto, they will additionally break like crypto.
| Market layer | What it permits | Examples from the article | Risk Edel uncovered |
|---|---|---|---|
| Access | Users achieve publicity to stocks and ETFs onchain. | Robinhood stock and ETF tokens for EU prospects; xStocks’ 100+ stocks and ETFs. | Legal and issuer-level backing are essential, however not enough. |
| Trading | Tokenized stocks move throughout venues, chains, and DeFi platforms. | xStocks throughout 50+ built-in platforms; $25B+ complete transaction quantity. | More integrations create extra pricing and liquidity dependencies. |
| Collateral | Users borrow towards tokenized equities. | Kamino accepting SPYx, QQQx, GOOGLx, AAPLx, NVDAx, TSLAx, MSTRx, HOODx. | Wrapped variations, vault alternate charges, and oracle paths can turn into assault surfaces. |
| Future derivatives | Tokenized equities turn into inputs for structured merchandise and leverage. | Implied subsequent part as collateral markets mature. | A wrapper or oracle failure can unfold past one lending market. |
The disconnect between backing and security
A lending market costs a number of layers, such as the tokenized fairness itself, the wrapped model constructed on prime of it, and the alternate fee a vault makes use of to transform between the two.
It additionally costs the oracle path that studies a worth, the lending market’s personal borrowing limits, and whether or not that collateral can really be bought throughout a interval of stress. Edel’s exploit sat virtually completely in the wrapper and oracle layers.
Using a tokenized stock as collateral provides a second pricing problem on prime of the fairness itself. A protocol additionally has to price each on-chain illustration constructed round that stock, together with how a wrapper’s alternate fee behaves beneath stress. That publicity comes from the collateral integration constructed round a tokenized stock.
Flash loans, collateral manipulation, and ERC-4626 exchange-rate assaults have all proven up in DeFi exploits earlier than. This exploit’s novelty lies in the asset class these strategies goal, and it seems to be one in every of the first clear tokenized-stock-collateral exploits on document.
How this performs out
In the bull case, protocols spend the subsequent yr isolating wrapper danger. That means capping how a lot collateral in a lending market can come from wrapped tokenized stocks, separating issuer-level prices from wrapper alternate charges, and constructing oracle paths {that a} single flash mortgage can’t move.
Tokenized equities then turn into credible collateral for conservative borrowing towards liquid names like Apple, Nvidia, Tesla, and Google. Edel finally ends up remembered as the early failure that compelled higher design earlier than the class scaled.
In the bear case, listings outrun the danger work. More venues settle for tokenized stocks as collateral earlier than oracle design and wrapper isolation catch up.
The variety of wrapped tokens, bridges, and vaults constructed round every ticker retains multiplying quicker than anybody can audit them.
Along that path, extra exploits in the low a whole lot of 1000’s of {dollars} proceed to floor involving exchange-rate manipulation and skinny liquidity. Tokenized stocks have turn into a safety flashpoint over how DeFi protocols use them as collateral.
The first part of tokenized stocks was access: letting eligible customers maintain tokenized publicity to names such as Apple or Google. The second part was trading, which concerned making that declare move throughout chains round the clock.
| Scenario | What has to occur | Market final result | What Edel turns into in hindsight |
|---|---|---|---|
| Bull case: safer collateral markets | Protocols isolate wrapper danger, cap collateral publicity, separate issuer costs from wrapper alternate charges, and harden oracle paths. | Tokenized equities turn into credible collateral for conservative borrowing towards liquid names like Apple, Nvidia, Tesla, Google, SPY, and QQQ. | An early failure that compelled higher design earlier than the class scaled. |
| Base case: slower collateral adoption | Lending markets preserve tokenized stocks in remoted swimming pools with conservative loan-to-value ratios and tight caps. | Tokenized stocks develop primarily as buying and selling property, whereas borrowing use circumstances increase step by step. | A warning label that slows leverage however does not cease the market. |
| Bear case: listings outrun danger controls | More venues settle for tokenized stocks and wrapped variants earlier than oracle design and wrapper isolation enhance. | More small-to-mid exploits seem round exchange-rate manipulation, skinny liquidity, bridges, and vault accounting. | The first seen signal that tokenized-stock collateral grew to become a safety flashpoint. |
Edel arrived at the begin of the third part, collateral, the place holding a tokenized stock additionally permits borrowing towards it.
The first two phases of tokenized stocks rewarded whoever listed the most tickers or reached the most chains. The subsequent one rewards whoever can price a wrapped stock appropriately beneath stress, each time.
The publish How tokenized stocks fail as collateral even when the stock price does not move appeared first on CryptoSlate.
