Breaches and incidentsBriefConfirmed by two or more outlets
Moonwell (Base): AI-co-authored oracle configuration priced cbETH at about USD 1.12
18:01 UTC 15 Feb 2026, when governance proposal MIP-X43 executed: 1,096.317 cbETH liquidated, about USD 1.78M (USD 1,779,044.83) bad debt.
- Disclosed
What happened
- Root cause: one oracle configuration used the raw cbETH/ETH rate without multiplying by ETH/USD. The Block reports the linked pull request lists Claude Opus 4.6 as a co-author. Moonwell has not attributed the incident to AI-generated code.
- Attribution: not an attack by a named actor; liquidators exploited the mispricing.
- Response: caps cut to 0.01; the oracle fix needed a governance vote, so liquidations continued meanwhile.
Sources
- https://www.theblock.co/post/390302/defi-lending-protocol-moonwell-hit-with-1-8-million-bad-debt-after-oracle-misconfiguration
- https://decrypt.co/358374/oracle-error-leaves-defi-lender-moonwell-1-8-million-bad-debt
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.