Edel Finance suffers $403,000 exploit through tokenized Google stock price manipulation

DeFi lending protocol Edel Finance suffered a $403,000 exploit on July 1, 2026, after an attacker manipulated the exchange rate of its tokenized Google stock wrapper, wGOOGLx, inflating its collateral value by 78 times (7,700%). The attacker used flash loans to distort the conversion rate and borrow real assets, including 384,215 USDC. Edel Finance paused its version-one contracts, offered a white-hat settlement, and committed to absorbing all bad debt so depositors suffer no losses.

Edel Finance exploit mechanics

• ▪The attacker used a flash loan to repeatedly supply and borrow, distorting the conversion rate between wGOOGLx and GOOGLx
• ▪Edel Finance suffered an exploit on July 1, 2026, resulting in approximately $403,000 in bad debt
• ▪The attacker used inflated wGOOGLx collateral to borrow real assets, including 384,215 USDC and wrapped positions in SPYx, QQQx, MSTRx, NVDAx, and TSLAx

Oracle price manipulation vulnerability

• ▪SlowMist traced the root cause to Edel Finance's price source, which directly read an ERC-4626-style vault's convertToAssets() rate using latestAnswer()
• ▪The exploit did not stem from faulty Chainlink price oracles, which correctly reported Alphabet's share price at around $357

Wrapper token exchange rate

• ▪The tokenized Google stock, representing on-chain exposure to GOOGL equity, reportedly inflated by 7,700% during the lending exploit
• ▪The attacker manipulated the exchange rate between wGOOGLx and GOOGLx, inflating the collateral value of wGOOGLx to roughly 78 times its correct level

Tokenized stock collateral market

• ▪RWA.xyz estimates the on-chain value of tokenized stocks at $1.7 billion, representing a 2.17% increase over a 30-day period
• ▪Kamino became the first major lending protocol to accept tokenized equities as collateral, including SPYx, QQQx, GOOGLx, AAPLx, NVDAx, TSLAx, MSTRx, and HOODx

Security firm loss estimates

• ▪GoPlus cited approximately $403,000 in losses and estimated the attacker's net profit at roughly $305,000
• ▪Cyvers estimated the Edel Finance exploit loss at roughly $353,000, while CertiK estimated the drained funds at approximately $204,000

Protocol recovery plan

• ▪Edel Finance offered the attacker a white-hat settlement and is coordinating with exchanges while developing a version-two protocol with a redesigned pricing setup
• ▪Edel Finance paused all version-one contracts, absorbed the bad debt to ensure no depositor took a loss, and promised to restore balances one-to-one