LlamaGuard Proposes Bounded Oracle Redesign As $36M Morpho Liquidation Episode Renews DeFi Risk Architecture Debate
A thinly traded Pendle yield market was manipulated early Tuesday to trigger approximately $36.1 million in liquidations on Morpho, wiping out leveraged positions in roughly 14 minutes while leaving lenders unharmed. The incident has reignited debate over oracle design in decentralized finance and the risks of looped yield strategies.
The attack targeted the Pendle reUSD principal token pool maturing December 10, which held under $9 million in liquidity, while the Morpho lending market accepting those tokens as collateral contained $67.5 million in collateral against $52.2 million in borrows.
Borrowers had looped their positions to health factors as low as 1.03, maintaining buffers of less than 3% against price movements. Between 04:37 and 04:51 UTC, 33 liquidation events repaid $36.14 million in debt and seized 38.6 million principal tokens, with the USDC market accounting for nearly all losses. The three largest liquidated positions totaled $13.01 million, $11.01 million, and $6.83 million.
Onchain analysts identified a single wallet that purchased reUSD yield tokens to push the implied yield to 20%, flooding the principal token pool and depressing its price. The same entity appears to have executed the liquidations, with one analyst estimating realized gains of at least $360,000.
Pendle and vault curator Steakhouse Financial both stated the price feed operated as intended, referencing the lower of a 15-minute average market price and a fixed maturity curve. When the market price dropped, the average became the reference, slashing collateral values and pushing overleveraged borrowers across the 91.5 percent liquidation threshold.
The protocol recorded zero bad debt. PENDLE declined 4.3% to $1.74 and MORPHO fell 5% to $2.52, though both remain up roughly 29% over the week.
From Warning to Redesign
The vulnerability was publicly flagged eight days prior, when a user noted on the Morpho governance forum that borrow volume far exceeded available liquidity. Steakhouse itself had acknowledged in a 2025 forum post that market-based oracles, while closer to true prices, are susceptible to manipulation in thinly traded pools.
Re Protocol, which issues reUSD, said it is investigating whether the principal token market price was intentionally manipulated and is working with teams on a safer oracle configuration, though no involved protocol has formally accused the trader of manipulation.
In response to the incident, LlamaRisk outlined an alternative architecture it is proposing for Aave under the LlamaGuard PT system. Rather than referencing pool prices directly, the design employs a multi-day smoothed rate that re-prices only when drift exceeds a published 0.30% gate, with each step bounded by contract-enforced limits and subject to minimum delays between updates. This would force any attacker to maintain pool displacement for days rather than minutes, making manipulation slow, expensive, and visible.
Additionally, the system uses dynamic liquidation thresholds that rise as principal tokens approach maturity, automatically expanding borrowing power as the asset de-risks. The architecture runs on Chainlink’s decentralized runtime environment, with workflow code cryptographically verifiable and parameters owned by Aave Governance rather than a delegated operator.
Disclaimer
In line with the Trust Project guidelines, please note that the information provided on this page is not intended to be and should not be interpreted as legal, tax, investment, financial, or any other form of advice. It is important to only invest what you can afford to lose and to seek independent financial advice if you have any doubts. For further information, we suggest referring to the terms and conditions as well as the help and support pages provided by the issuer or advertiser. MetaversePost is committed to accurate, unbiased reporting, but market conditions are subject to change without notice.
About The Author
Alisa, a dedicated journalist at the MPost, specializes in crypto, AI, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.
More articles
Alisa, a dedicated journalist at the MPost, specializes in crypto, AI, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.
