Edel Finance Exploit Inflates Tokenized Google Stock Value by 7,700%

Edel Finance, a platform for tokenized equities trading, suspended its version-one lending protocol after an attacker exploited its wrapping mechanism associated with a tokenized version of Google's Alphabet stock. The attacker inflated the collateral value of the wrapped Google share, known as wGOOGLx, to about 78 times its actual value, enabling the borrowing of real assets against this mispriced collateral. This manipulation resulted in roughly $403,000 in bad debt.

Notably, the price manipulation was not due to faulty price feeds; Edel utilized Chainlink oracles, which accurately reported the share price of Alphabet at approximately $357. Instead, the vulnerability lay in the conversion process between the tokenized stock GOOGLx and its wrapped form wGOOGLx, allowing the attacker to exploit the pricing structure.

In response to the exploit, Edel Finance stated it will absorb the financial losses to ensure that depositors are made whole. The platform emphasized that all version-one contracts are currently paused and cautioned users not to engage with them, while the company traces the attacker's transactions and engages with exchanges.

Edel Finance plans to implement a redesigned version-two protocol aimed at preventing such price manipulation in the future and has initiated a white-hat settlement offer to the attacker. This exploit highlights a persistent vulnerability in the decentralized finance (DeFi) ecosystem, where price manipulation remains a critical security concern.

As tokenized equities continue to grow within DeFi, they introduce additional complexities, especially regarding the wrapping and conversion processes that link the actual stock price to its use in lending protocols. Edel's incident serves as a reminder of the need for robust security measures as these services evolve.