Moonwell Lending

FORENSIC REPORT

Time of death: February 15, 2026, approximately 14:32 UTC. The specimen—Moonwell Lending Protocol operating on the Base chain—was pronounced dead on arrival at the forensics lab. Witnesses report normal vital signs until the exploit commenced, after which the patient experienced catastrophic liquidity hemorrhaging and rapid asset depletion.

Cause of death analysis: Post-mortem examination reveals the fatal flaw in the collateral acceptance mechanism. The protocol's cbETH (Coinbase Wrapped Ether) validation system contained a critical gap: it accepted collateral valuations without performing adequate price verification against trustworthy sources. The attacker exploited this by depositing cbETH, manipulating or leveraging existing price discrepancies in the collateral calculation, and borrowing far beyond legitimate backing. The underlying asset-to-loan ratio mathematics simply didn't exist—we're observing a classic case of "trust me bro" collateral assessment.

Contributing factors: The specimen showed warning signs typical of protocols operating under time pressure. Initial deployment of cbETH support appears to have prioritized speed over security rigor. No circuit breakers existed to flag abnormal borrowing-to-collateral ratios. The protocol's interaction with external price feeds shows insufficient redundancy checks. We note the absence of governance intervention mechanisms that might have halted the bleeding mid-exploit.

Victim impact: The lending pool suffered acute insolvency. Legitimate depositors lost access to $1.8 million in total value. The protocol's reserve buffers proved insufficient—a common autopsy finding in specimens with weak risk management architecture. Borrowers who played by the rules watched their collateral positions become irrelevant as the house of cards collapsed.

Pathologist's note: This cadaver joins thousands of others in the Rekt wing, each whispering the same final lesson: in DeFi, trust in your price feeds like you trust your own pulse. When you stop verifying collateral value, you're not running a lending protocol—you're running a vending machine that doesn't check if the coins are real. Moonwell learned this lesson the hard way, and so did its users. File closed.