Compound liquidator makes $4M as oracles post inflated Dai price

Published at: Nov. 26, 2020

The crypto market suffered a powerful crash on Thursday morning UTC, which sent prices of major currencies such as Bitcoin (BTC) and Ether (ETH) tumbling in excess of 10%.

When traders rush for the exits, the price of stablecoins generally increase as the demand for stability rises. In today’s crash, however, the effect became particularly pronounced on Dai, which briefly traded for $1.3 between 7 am and 8 am UTC.

Most notably, Dai traded at this inflated valuation only on Coinbase and Uniswap, while other exchanges including Kraken and Bitfinex seem to have maintained a relatively stable price.

Coinbase and Uniswap are the two exchanges used by Compound’s Open Price Feed oracle. The former acts as the baseline, while the latter is used as a sanity check and anchor. Nonetheless, it appears that Uniswap failed in its function and also posted a much higher price than normal.

Compound’s liquidation this morning amounted to $89 million, of which about $52 million came from Dai, according to data from DuneAnalytics.

One liquidation in particular is notable for its extremely large size of 46 million Dai repaid.

As DeFi researcher Sam Priestley explained, this liquidation was performed on a leveraged COMP farmer, who used USD Coin (USDC) and Dai collateral to power recursive borrowing in the same currencies. The apparent increase in Dai’s price put the account below the liquidation threshold.

The liquidator seized almost 2.4 billion cDai, worth approximately $50 million with a price of $0.0209, while returning just $46 million in Dai. This is expected behavior given Compound’s current liquidation incentive of 8%.

The transaction in question involved the use of a flash swap from Uniswap and calls to update Compound’s oracle. Another four transactions issued by the same liquidator removed an additional $6 million in debt.

The event highlighted the dangers of relying on just a few data points for oracles, Chainlink (LINK) founder Sergey Nazarov told Cointelegraph: “We predicted this very exploit of centralized oracles and poor data quality over a year ago,” mentioning his explanation of the risks of using a single exchange. He continued: 

“DeFi protocols that rely on centralized oracles that pull data from single exchanges, DEXes or otherwise, are inadvertently putting user funds at risk. [...] The Chainlink network was unaffected by this exploit because we source data from multiple leading data providers and hundreds of exchanges, making sure we capture the real-world price of a cryptocurrency through proper market coverage.”

While there is no evidence to suggest active manipulation, the fact that Dai’s price jumped specifically on the exchanges used by Compound’s oracles could draw suspicion. In general, the liquidation adds to the recent flash loan hacks to highlight DeFi’s excessive reliance on just a few data sources as oracles, Nazarov concluded.

Tags
Dai
Related Posts
Stablecoin RAI launches, a pure, decentralized alternative for DeFi
New Ethereum-backed stablecoin RAI hopes to be the savior of the DeFi sector by providing a truly decentralized stablecoin alternative. Developed by blockchain startup Reflexer Labs, RAI is not pegged to any fiat currency and its monetary policy is managed by an on-chain, autonomous controller. It's a fork of Maker's DAI. RAI co-founder Ameen Soleimani explained: “RAI is an asset backed only by ETH, governance-minimized, and programmed to maintain its own price stability without needing to peg to an external price reference like the USD.” Soleimani believes that RAI, which he dubbed “A Money God,” has far greate potential than …
Decentralization / Feb. 19, 2021
Cheese Bank’s multi-million-dollar hack explained by security firm
An Ethereum-based decentralized finance platform known as Cheese Bank recently suffered a $3.3 million loss — the product of a hack in early November. The thieves utilized a somewhat newly found weakness in the DeFi sector that harnesses flashloans. The Cheese Bank thieves stole the cheddar via dollar-pegged stablecoins USD Coin (USDC), Tether (USDT) and Dai. A number of other platforms have also suffered similar fates in recent days. “In the string of attacks, we have seen malicious actors use flash loans to instantaneously borrow, swap, deposit and again borrow large numbers of tokens so they can artificially manipulate the …
Technology / Nov. 16, 2020
Some loans on Maker are never liquidated, prompting debt auction overhaul
The Maker community is looking for solutions after an analysis by B.Protocol suggests that it is possible to exploit the liquidation system to create under-collateralized debt. The researchers created small vaults for $128, just above Maker’s “dust” parameter that defines the minimum size for new vaults. As Maker’s oracles updated to new prices that made these vaults eligible for liquidation, B.Protocol found that the debt remained unclaimed for several hours. While the researchers later closed the bad debt loans on their own, the mechanism could be abused to create a Dai position that would never be liquidated. Splitting a $1 …
Technology / Nov. 16, 2020
Ether already ‘flippening’ Bitcoin, says Celsius CEO
Bitcoin (BTC), the largest cryptocurrency by market capitalization, has already started losing its market dominance to Ether (ETH), according to Celsius Network CEO Alex Mashinsky. In a Monday interview with Kitco News, Mashinsky argued that the Ether “flippening,” or the hypothetical scenario in which Ether overtakes Bitcoin as the world’s most valued cryptocurrency, is already happening right now. Mashinsky said that the flippening has already happened on Celsius. “We manage about $17 billion in deposits, or in customer coins, and the number one coin held in dollar terms is Ethereum,” he said. Mashinsky also predicted that Ether will have completely …
Decentralization / July 6, 2021
Finance Redefined: DeFi party’s over, back to building now, Sept. 30—Oct. 7
This week in DeFi was notable for its lack of notable events. Nobody set new records for the fastest hack of a new contract, nobody famous exit scammed or pulled a DeFi Jesus reincarnation act. You can just feel that something is different now. It used to be that every weekend we’d discover some new exotic food, or someone would launch a vampire attack on another protocol with a cleverly disguised Ponzi scheme. Not to say nothing happened at all this week, but the scope just feels different this time. What really grabbed attention was the price collapse of a …
Technology / Oct. 7, 2020