The Peapods team is aware of recent transactions that manipulated prices in low volume, low liquidity Uniswap pools, which were utilized as TWAP oracles in some of our Pod markets.
As a reminder, Peapods was designed to be a fully permissionless protocol, allowing anyone to create a Pod without intervention or approval from the team. Pod creators are responsible for selecting a safe oracle for their Pods, and we encourage lenders to thoroughly vet these oracles before supplying capital.
Regrettably, in this instance, the deterioration of oracles has resulted in losses for users in the pLONGsUSDe and podETH Pods.
Oracles for both Pods began with >1M in Total Value Locked (TVL) when Pods were originally created, but liquidity was subsequently moved, leaving the oracles vulnerable.
This quality decay of these oracles also slipped through our Metavault working group's internal process, leading to the vault maintaining limited allocations to each of these Pods.
Fortunately, losses on Peapods are mitigated by multiple safeguards, including our resilient collateralization model and established risk thresholds. The team is also exploring additional mechanisms to further strengthen these protections.
While no Peapods code was exploited, our team is also committed to improving the user experience to enhance the flow of information for users, helping them make more informed decisions regarding oracle selection, monitoring, vetting, and capital allocation in the future.
This enhanced information flow will also aid the metavault working group establish robust 'best practices' for vetting and allocating risk, before handing this responsibility over to decentralized vlPEAS governance.
Our ongoing efforts to iterate and improve the platform are essential as we strive to create the first truly permissionless and immutable complete DeFi protocol suite. Our LVF offering is still officially in 'Beta' for this reason.
It is reassuring to note that this issue stemmed from external oracle conditions permissionlessly set by users, rather than any flaw in our core code logic, which underscores the value of the multiple audits we have self-funded.
The team is actively working on a reimbursement plan to fully offset user losses from this event. We’ve also reached out to the originator and offered a bounty for the return of funds.
In addition, we've already been able to recover a significant portion of the affected funds by reaching an agreement with a whitehat MEV actor who intervened and successfully frontran parts of the originator’s coordinated action.
Rest assured, we remain dedicated to our permissionless, decentralized, and immutable mission, and we will continue to push through adversity until PEAS becomes the #1 DeFi platform.
Stay tuned for a detailed post mortem and more updates on our ongoing improvement program.
Show original10.78K
160
The content on this page is provided by third parties. Unless otherwise stated, OKX is not the author of the cited article(s) and does not claim any copyright in the materials. The content is provided for informational purposes only and does not represent the views of OKX. It is not intended to be an endorsement of any kind and should not be considered investment advice or a solicitation to buy or sell digital assets. To the extent generative AI is utilized to provide summaries or other information, such AI generated content may be inaccurate or inconsistent. Please read the linked article for more details and information. OKX is not responsible for content hosted on third party sites. Digital asset holdings, including stablecoins and NFTs, involve a high degree of risk and can fluctuate greatly. You should carefully consider whether trading or holding digital assets is suitable for you in light of your financial condition.