Moonwell exploit on 2025-11-04 ($3.7M reported)
Exploit on Base, 4 Nov 2025. Reported loss $3.7M. Last verified 4 Nov 2026.
notable
Reported loss
$3.7M
as reported by the sources
Recovered
-
nothing reported
Status
Unknown
updated 26 Oct 2026
Date
Base
Summary
On 2025-11-04 a faulty wrsETH/ETH Chainlink feed reported 1 wrsETH as worth 1,649,934.60732 ETH, and an attacker borrowed assets against minimal wrsETH collateral on Moonwell's Base market, leaving a total bad debt of $3.7M. Moonwell zeroed the wrsETH caps and later moved those markets to exchange-rate oracles.
- Protocol
- Moonwell
- Type
- Exploit
- Reported loss
- $3,700,000 · as stated: $3.7M bad debt source: forum.moonwell.fi ↗
Facts and where they come from
| Fact | Value | Source |
|---|---|---|
| Date | November 4th | forum.moonwell.fi ↗ |
| Oracle | 1 wrsETH equals 1,649,934.60732 ETH | forum.moonwell.fi ↗ |
| Bad debt (USD) | $3.7M | forum.moonwell.fi ↗ |
| Transaction | 0x229caeb87e0b6c31afad950150d2ba05a8d7fe823c9e5c05af63b4150b8f6cc6 | forum.moonwell.fi ↗ |
| Fix | exchange-rate oracles | forum.moonwell.fi ↗ |
On-chain transactions
- BaseTransaction 0x229c…6cc6
Primary sources
- Moonwell forum: wrsETH oracle malfunction 11/4/25 (Anthias Labs) ↗ governance post · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram