How tokenized stocks fail as collateral even when the stock price does not move

An important story is making waves across the blockchain ecosystem. DeFi lending protocol Edel disclosed a $403,000 exploit that hit the layer where tokenized stocks are trying to become DeFi collateral. Edel said no depositor would bear losses, and the team would absorb the bad debt, restore affected balances one-to-one, and rebuild the protocol's oracle architecture for a version two release. The attack manipulated the exchange rate between wGOOGLx, a wrapped version of Edel's tokenized Google stock, and GOOGLx, the token it wraps.

Edel said the manipulation pushed wGOOGLx's collateral value to roughly 78 times its correct level. SlowMist traced the root cause to Edel's price source, which used latestAnswer() to return an ERC-4626-style vault's convertToAssets() rate. That conversion rate can be manipulated when an attacker controls enough of the underlying flow, and Edel's price feed reads it directly.

Market Dynamics

CertiK described the same flaw from the lending side: the attacker manipulated wGOOGLx's collateral price, which tracked its GOOGLx balance, then borrowed against the inflated value. GoPlus noted that the attacker used a flash loan to repeatedly supply and borrow, distorting the wGOOGLx/GOOGLx conversion rate. The inflated collateral then supported real borrowed assets, including 384,215 USDC and wrapped positions in SPYx, QQQx, MSTRx, NVDAx, and TSLAx.

Security firms published different estimates. Cyvers put the loss at roughly $353,000, GoPlus cited about $403,000 in losses and roughly $305,000 in attacker profit, and CertiK put the drained funds at roughly $204,000. The gap appears to reflect different measurements, including bad debt, gross loss, and net attacker profit.

The disconnect probably comes from each firm measuring something different, such as bad debt, gross loss, or net profit. The critical failure sat in the exchange rate between the wrapped token and its underlying counterpart, a relationship that Edel's lending market priced as though it were stable. Alphabet's share price did not drive the exploit.

Market Impact

Infographic outlining the Edel exploit's five steps, from a flash loan to wrapper mispricing that inflated wGOOGLx collateral roughly 78x before real assets were borrowed. The market in numbers RWA. xyz puts tokenized stocks' onchain value at $1.

17% over the past 30 days. Monthly transfer volume sits at $8. 92 billion, and holders at over 396,000.

xStocks alone lists more than 100 stocks and ETFs across more than 50 integrated platforms, with over $25 billion in total transaction volume. It describes itself as fully backed and open to plugging into any DeFi protocol without permission. Backed, the issuer behind xStocks, markets the tokens explicitly for DeFi use: lending tokenized Apple shares or borrowing against them without selling.

Crypto markets are watching this development closely as investors weigh its potential impact on prices.