Edel Finance suffers $403,000 exploit through tokenized Google stock price manipulation

Jul 1, 2026

DeFi lending protocol Edel Finance suffered a $403,000 exploit on July 1, 2026, after an attacker manipulated the exchange rate of its tokenized Google stock wrapper, wGOOGLx, inflating its collateral value by 78 times (7,700%). The attacker used flash loans to distort the conversion rate and borrow real assets, including 384,215 USDC. Edel Finance paused its version-one contracts, offered a white-hat settlement, and committed to absorbing all bad debt so depositors suffer no losses.

Edel Finance exploit mechanics

▪The attacker used a flash loan to repeatedly supply and borrow, distorting the conversion rate between wGOOGLx and GOOGLx.
▪Edel Finance suffered an exploit on July 1, 2026, resulting in approximately $403,000 in bad debt.
▪The attacker used inflated wGOOGLx collateral to borrow real assets, including 384,215 USDC and wrapped positions in SPYx, QQQx, MSTRx, NVDAx, and TSLAx.

Oracle price manipulation vulnerability

▪SlowMist traced the root cause to Edel Finance's price source, which directly read an ERC-4626-style vault's convertToAssets() rate using latestAnswer().
▪The exploit did not stem from faulty Chainlink price oracles, which correctly reported Alphabet's share price at around $357.

Wrapper token exchange rate

▪The tokenized Google stock, representing on-chain exposure to GOOGL equity, reportedly inflated by 7,700% during the lending exploit.
▪The attacker manipulated the exchange rate between wGOOGLx and GOOGLx, inflating the collateral value of wGOOGLx to roughly 78 times its correct level.

Tokenized stock collateral market

▪RWA.xyz estimates the on-chain value of tokenized stocks at $1.7 billion, representing a 2.17% increase over a 30-day period.
▪Kamino became the first major lending protocol to accept tokenized equities as collateral, including SPYx, QQQx, GOOGLx, AAPLx, NVDAx, TSLAx, MSTRx, and HOODx.

Security firm loss estimates

▪GoPlus cited approximately $403,000 in losses and estimated the attacker's net profit at roughly $305,000.
▪Cyvers estimated the Edel Finance exploit loss at roughly $353,000, while CertiK estimated the drained funds at approximately $204,000.

Protocol recovery plan

▪Edel Finance offered the attacker a white-hat settlement and is coordinating with exchanges while developing a version-two protocol with a redesigned pricing setup.
▪Edel Finance paused all version-one contracts, absorbed the bad debt to ensure no depositor took a loss, and promised to restore balances one-to-one.