LlamaGuard Proposes Bounded Oracle Redesign As $36M Morpho Liquidation Episode Renews DeFi Risk Architecture Debate
A thinly traded Pendle yield market was manipulated early Tuesday to set off roughly $36.1 million in liquidations on Morpho, wiping out leveraged positions in roughly 14 minutes whereas leaving lenders unhurt. The incident has reignited debate over oracle design in decentralized finance and the dangers of looped yield methods.
The assault focused the Pendle reUSD principal token pool maturing December 10, which held beneath $9 million in liquidity, whereas the Morpho lending market accepting these tokens as collateral contained $67.5 million in collateral in opposition to $52.2 million in borrows.
Borrowers had looped their positions to well being components as little as 1.03, sustaining buffers of lower than 3% in opposition to worth actions. Between 04:37 and 04:51 UTC, 33 liquidation occasions repaid $36.14 million in debt and seized 38.6 million principal tokens, with the USDC market accounting for practically all losses. The three largest liquidated positions totaled $13.01 million, $11.01 million, and $6.83 million.
Onchain analysts recognized a single pockets that bought reUSD yield tokens to push the implied yield to twenty%, flooding the principal token pool and miserable its worth. The identical entity seems to have executed the liquidations, with one analyst estimating realized beneficial properties of at the very least $360,000.
Pendle and vault curator Steakhouse Financial each acknowledged the value feed operated as meant, referencing the decrease of a 15-minute common market worth and a set maturity curve. When the market worth dropped, the typical grew to become the reference, slashing collateral values and pushing overleveraged debtors throughout the 91.5 % liquidation threshold.
The protocol recorded zero unhealthy debt. PENDLE declined 4.3% to $1.74 and MORPHO fell 5% to $2.52, although each stay up roughly 29% over the week.
From Warning to Redesign
The vulnerability was publicly flagged eight days prior, when a person famous on the Morpho governance discussion board that borrow quantity far exceeded out there liquidity. Steakhouse itself had acknowledged in a 2025 discussion board publish that market-based oracles, whereas nearer to true costs, are inclined to manipulation in thinly traded swimming pools.
Re Protocol, which points reUSD, stated it’s investigating whether or not the principal token market worth was deliberately manipulated and is working with groups on a safer oracle configuration, although no concerned protocol has formally accused the dealer of manipulation.
In response to the incident, LlamaRisk outlined an alternate structure it’s proposing for Aave beneath the LlamaGuard PT system. Rather than referencing pool costs immediately, the design employs a multi-day smoothed price that re-prices solely when drift exceeds a broadcast 0.30% gate, with every step bounded by contract-enforced limits and topic to minimal delays between updates. This would pressure any attacker to take care of pool displacement for days fairly than minutes, making manipulation sluggish, costly, and visual.
Additionally, the system makes use of dynamic liquidation thresholds that rise as principal tokens strategy maturity, routinely increasing borrowing energy because the asset de-risks. The structure runs on Chainlink’s decentralized runtime surroundings, with workflow code cryptographically verifiable and parameters owned by Aave Governance fairly than a delegated operator.
The publish LlamaGuard Proposes Bounded Oracle Redesign As $36M Morpho Liquidation Episode Renews DeFi Risk Architecture Debate appeared first on Metaverse Post.
