shoalfi
connecting…

last week of august 2026

three protocols, one week, same attack.

moonwell · base · aug 27 2026

a $6m token with ~$1.2m of daily volume was allowed to back $11m of loans.

  • market cap ~$6m
  • 24h volume ~$1.18m
  • collateral factor 50%
  • supply cap 20m MAMO
  • borrow cap 3m MAMO
  • oracle: spot, no twap
  • borrowed $11.03m
  • net loss ~$8.7m
  • caps set to 1 wei after

sources: the defiant, cryptoticker, moonwell post-mortem

morpho / pendle · ethereum · aug 25 2026

$320k of trades moved a price 3% and liquidated $36.4m.

  • 11 trades, 04:28–04:37 utc
  • ~$320k SY-reUSD → 9.5m YT-reUSD
  • pt-reusd −3%
  • 33 liquidations in 14 min
  • $36.14m debt repaid
  • $67.5m collateral in the market vs $8.97m pool depth (not directly comparable)
  • no bad debt
  • attacker likely netted ~$360k as liquidator

sources: cryptobriefing, the crypto times, crypto daily

tectonic · cronos · aug 30 2026

TONIC pumped ~100x in 20 minutes. ~$75m borrowed. the chain was halted.

  • pre-attack tvl ~$121.7m
  • active loans ~$82.7m
  • cronos halted and rolled back

sources: coindesk, the crypto times, cryptoticker

none of these were hacks. the oracle reported the market price. nobody asked how much could be sold.