Moonwell was exploited for 295 ETH, using flawed pricing from an external offline oracle. The DeFi lending protocol suffered a similar exploit earlier in October and apparently did not fix the flaw, allowing the hacker to attack again.Moonwell was exploited for 295 ETH, using flawed pricing from an external offline oracle. The DeFi lending protocol suffered a similar exploit earlier in October and apparently did not fix the flaw, allowing the hacker to attack again.

DeFi lender Moonwell hit by $1M exploit tied to Chainlink data error

2025/11/05 00:02
3 min read

Moonwell, a multi-chain lending protocol, was exploited through flawed oracles and pricing data. The platform lost around $1M just a day after the larger Balancer hack. 

Moonwell, the multi-chain lending protocol, was exploited through flawed oracle data. The estimated losses were just $1M, arriving a day after the bigger Balancer hack

BlockSec Phantom detected a series of suspicious outflows from the protocol, alerting to a potential smart contract exploit. 

The exploiter used a pricing flaw to borrow and trade specific types of wrapped ETH. The exploit depended on a price disparity for borrowing 20 wstETH against only 0.00002 wrstETH. The hacker pocketed the difference when trading, for a total of 295 ETH in gains. 

The low collateral generated immediate transactions of wstETH, while the loan was repaid in the same block. The flawed price was supplied by an off-chain oracle. 

The hacker was capable of exploiting the contract, as the oracle returned a price of $5.8M per wrstETH. Based on transaction data, Moonwell used ChainLink, which apparently made the pricing mistake. 

The hacker just had to use the favorable conditions for a flash loan and repeat several times to complete the exploit. The exploit sets the bigger issue of oracle reliability, even coming from the market leader ChainLink. 

Moonwell marks fourth significant exploit

Moonwell is a relatively old DeFi protocol, spread across multiple chains. As of November 2025, the protocol held $213M in its lending vaults. Moonwell uses Base, Optimism, Moonbeam, and Moonriver networks. 

The protocol has seen previous attacks, with four exploits in the past three years. Moonwell is a fork of Compound V2, inheriting some of the protocol’s problems. 

Previously, Moonwell suffered a bad loan incident on October 10, losing $1.7M. In December 2024, the protocol saw another flash loan exploit for $320K. In 2022, Moonwell suffered losses due to a bridge exploit, which affected the protocol. 

WELL token crashes after exploit

Moonwell’s native WELL token crashed after the news of the exploit. WELL lost over 15% to $0.011. As with other hacks, the losses from broken reputation and token crashes are even bigger than the exploit itself. 

The exploit brought a loss of reputation for Moonwell, causing a bank run on its stablecoin vaults. Users withdrew their USDC, causing effective APY to spike as high as 168%. The run from Moonwell vaults follows withdrawals from Balancer on Monday. 

Moonwell’s team did not comment on the hack for hours after the incident. The current exploit is seen as similar to the one on October 10, which means the protocol did not implement a fix. On-chain data shows a similar attack may have happened, taking 269 ETH through flawed pricing, but neither the team nor researchers noticed the withdrawals at that time. 

Moonwell claims to have undergone multiple security audits, but this did not prevent the additional hack. Despite the lower level of attacks against Web3 protocols, the recent events show the Ethereum ecosystem may hold risks when tasked with securing more value and bigger trades.

Join a premium crypto trading community free for 30 days - normally $100/mo.

Market Opportunity
DeFi Logo
DeFi Price(DEFI)
$0.000298
$0.000298$0.000298
+0.33%
USD
DeFi (DEFI) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

How Tapzi Can Surpass BlockDAG in 1 Month

How Tapzi Can Surpass BlockDAG in 1 Month

The post How Tapzi Can Surpass BlockDAG in 1 Month appeared on BitcoinEthereumNews.com. Crypto News 18 September 2025 | 18:20 The cryptocurrency landscape is evolving at breakneck speed, with new crypto presales constantly vying for investor attention. While BlockDAG, touted as one of the next crypto to explode, has garnered headlines for its technical narrative and aggressive presale momentum, a fresh contender—Tapzi (TAPZI)—is quietly redefining what a next-gen GameFi and Web3 token can achieve. In this deep-dive comparison, we’ll unpack how Tapzi stacks against BlockDAG across presale traction, technology, ecosystem utility, and long-term growth potential. The goal? To see why Tapzi (TAPZI) may outshine BlockDAG post-launch and become a leading force in the upcoming bull run. The Current Crypto Buzz: Tapzi (TAPZI) vs. BlockDAG (BDAG) BlockDAG has positioned itself as a cutting-edge infrastructure project designed to tackle blockchain scalability and decentralization challenges. Its DAG-based approach appeals to tech-focused investors looking for Ethereum alternatives. Meanwhile, Tapzi is emerging from the high-growth GameFi sector, where user adoption, community traction, and utility-driven design often decide long-term success. This is not just a battle of narratives—it’s a clash of ecosystems. And if history has shown us anything, projects with real-world usability, strong staking incentives, and retail-friendly entry points often outpace purely technical platforms. That’s where Tapzi (TAPZI) has the edge. Presale Momentum: Why Tapzi Could Outpace BlockDAG BlockDAG Presale: Tech Buzz, But Niche Appeal BlockDAG’s presale has attracted significant capital thanks to its next-gen blockchain pitch. However, the majority of this hype has been concentrated among tech-savvy investors and speculative traders rather than a broad base of retail participants. The lack of mass-market accessibility could limit its velocity post-launch. Tapzi Presale: Community-First Growth Tapzi’s presale, in contrast, has been community-driven and adoption-focused. Positioned within the GameFi sector, Tapzi attracts not only crypto enthusiasts but also gamers, creators, and DeFi participants. The project has structured its presale tiers…
Share
BitcoinEthereumNews2025/09/19 01:02
Exclusive interview with Smokey The Bera, co-founder of Berachain: How the innovative PoL public chain solves the liquidity problem and may be launched in a few months

Exclusive interview with Smokey The Bera, co-founder of Berachain: How the innovative PoL public chain solves the liquidity problem and may be launched in a few months

Recently, PANews interviewed Smokey The Bera, co-founder of Berachain, to unravel the background of the establishment of this anonymous project, Berachain's PoL mechanism, the latest developments, and answered widely concerned topics such as airdrop expectations and new opportunities in the DeFi field.
Share
PANews2024/07/03 13:00
Tezos (XTZ) Daily Market Analysis 14 February 2026

Tezos (XTZ) Daily Market Analysis 14 February 2026

Tezos shows mixed signals with price struggles but strong fundamentals – here's the latest: • Price is $0.40, down 6.20% over 7 days, underperforming the broader
Share
Coinstats2026/02/14 11:54