Oracle Exploit Sees $100 Million Liquidated on Compound
2 min read
More than $100 million was liquidated on lending platform Compound in the last 24 hours, according to LoanScan. This includes the third largest COMP farmer, who was liquidated for $46 million, noted Nansen CEO Alex Svanevik.
“My understanding is that the DAI price on Coinbase was driven up to a premium of around 30%. Compound’s oracle uses Coinbase for pricing data. This caused liquidations as the value of the loans exceeded collateralization-ratio thresholds,” Svanevik told Decrypt.
He added that,”As far as I can tell, Compound worked exactly as it should. But questions will be asked about the oracle.”
The 3rd largest COMP farmer took a big hit with the liquidations. Around $46m.
Tx: https://t.co/waOEZlh3U1 pic.twitter.com/QrlkPjJHyc
— Alex Svanevik
(@ASvanevik) November 26, 2020
(@ASvanevik) Compound is a platform that lets users lend cryptocurrencies to other individuals. It is the third-largest DeFi platform, with $12.8 billion in assets locked up in its smart contracts. To borrow cryptocurrency, the user has to put up collateral that exceeds the amount they are borrowing. But these loans are running on the decentralized Ethereum blockchain. If the blockchain notices that the collateral has become undercollateralized, then it forces the loan to be liquidated.
However, the blockchain doesn’t itself know the current prices of each coin—prices live on exchanges, not blockchains. So it checks the price on exchanges using oracles (things that connect blockchain to real-world data).
Compound seems had an oracle attack via Coinbase Pro. Nearly $90M of liquidation. pic.twitter.com/ptZsj3X8kf
— Marlboroxu (@marlboroxu) November 26, 2020
It appears that a malicious actor may have manipulated the price of DAI on the Coinbase Pro exchange, in order to trick the blockchain—via its oracles—into thinking that the current price of DAI really had shot up. When the blockchain thought DAI had hit $1.30, it figured that many of the loans were undercollateralized and liquidated them.
“Maybe it’ll be helpful with an example for what happened. If someone has a $100 loan when DAI is $1, then the spike caused their debt to spike to $130. And so if you had only collateralized the position up to $125, you’d get liquidated,” Svanevik explained.
“Close to $90m of loans were liquidated on @compoundfinance over the last 24hrs, with bulk of it DAI likely due to oracle issue as Coinbase DAI/USDC spiked to $1.3 momentarily, also the pair where yield farming is concentrated,” tweeted a crypto researcher known as Arthur.
Close to $90m of loans were liquidated on @compoundfinance over the last 24hrs, with bulk of it DAI likely due to oracle issue as Coinbase DAI/USDC spiked to $1.3 momentarily, also the pair where yield farming is concentrated.
Liquidation was relatively minimal on Aave and Maker pic.twitter.com/2VVCHP37o3
— Arthur (@Arthur_0x) November 26, 2020
In March, Compound saw $2.5 million in value liquidated, which was a record at the time. Now that pales in comparison.
