You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: proposals/mips/mip-x36/x36.md
+40-17Lines changed: 40 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,58 +2,81 @@
2
2
3
3
### **Summary**
4
4
5
-
Following the oracle malfunction involving the wrsETH/ETH feed on November 4, 2025, this proposal seeks to formally disable minting and borrowing in the wrsETH markets on both Base and OP Mainnet and transition these markets to use an exchange-rate feed rather than a market price oracle.
5
+
Following the oracle malfunction involving the wrsETH/ETH feed on November 4,
6
+
2025, this proposal seeks to formally disable minting and borrowing in the
7
+
wrsETH markets on both Base and OP Mainnet and transition these markets to use
8
+
an exchange-rate feed rather than a market price oracle.
6
9
7
-
These steps reduce further risk exposure and set the foundation for a gradual, orderly deprecation of the wrsETH markets.
10
+
These steps reduce further risk exposure and set the foundation for a gradual,
11
+
orderly deprecation of the wrsETH markets.
8
12
9
13
### **Background**
10
14
11
-
At approximately **5:44 AM UTC on November 4**, an oracle malfunction caused the **wrsETH/ETH feed** to report a faulty value, drastically overpricing wrsETH and enabling an attacker to borrow multiple assets using minimal collateral.
15
+
At approximately **5:44 AM UTC on November 4**, an oracle malfunction caused the
16
+
**wrsETH/ETH feed** to report a faulty value, drastically overpricing wrsETH and
17
+
enabling an attacker to borrow multiple assets using minimal collateral.
12
18
13
-
The wrsETH/USD price is derived by multiplying the Chainlink ETH/USD oracle with the wrsETH/ETH oracle. The wrsETH/ETH oracle erroneously reported **1 wrsETH = 1,649,934.6 ETH**, valuing each token at roughly **$5.8 billion**. This led to approximately **$3.7 million** in bad debt across the Moonwell protocol.
19
+
The wrsETH/USD price is derived by multiplying the Chainlink ETH/USD oracle with
20
+
the wrsETH/ETH oracle. The wrsETH/ETH oracle erroneously reported **1 wrsETH =
21
+
1,649,934.6 ETH**, valuing each token at roughly **$5.8 billion**. This led to
22
+
approximately **$3.7 million** in bad debt across the Moonwell protocol.
14
23
15
24
Immediately following the mispricing event:
16
25
17
-
* Supply and borrow caps for wrsETH were set to effectively zero.
26
+
- Supply and borrow caps for wrsETH were set to effectively zero.
18
27
19
-
* Borrow caps for all Core Markets on Base and Optimism were temporarily reduced to **0.1** to prevent additional over-borrowing.
28
+
- Borrow caps for all Core Markets on Base and Optimism were temporarily reduced
29
+
to **0.1** to prevent additional over-borrowing.
20
30
21
-
* All deposits and withdrawals remained open, allowing suppliers to withdraw funds where liquidity was available.
31
+
- All deposits and withdrawals remained open, allowing suppliers to withdraw
32
+
funds where liquidity was available.
22
33
23
34
### **Proposal**
24
35
25
-
To maintain a risk-off stance and begin the safe wind-down of wrsETH exposure, this proposal will:
36
+
To maintain a risk-off stance and begin the safe wind-down of wrsETH exposure,
37
+
this proposal will:
26
38
27
39
#### 1. Disable minting and borrowing in wrsETH markets on Base and OP Mainnet.
28
40
29
-
No new wrsETH can be supplied or borrowed. Supply and borrow caps will be set to a near-zero value (as setting caps to zero represents infinity at a contract level). Repayments and withdrawals will remain enabled for existing users.
41
+
No new wrsETH can be supplied or borrowed. Supply and borrow caps will be set to
42
+
a near-zero value (as setting caps to zero represents infinity at a contract
43
+
level). Repayments and withdrawals will remain enabled for existing users.
30
44
31
45
#### 2. Transition to exchange-rate feeds, replacing the existing oracle.
32
46
33
-
This ensures accurate value representation based on wrsETH's exchange-rate mechanics rather than rely on market rate pricing.
47
+
This ensures accurate value representation based on wrsETH's exchange-rate
48
+
mechanics rather than rely on market rate pricing.
Once minting and borrowing are disabled and the oracle is transitioned, the community can proceed with a gradual deprecation of wrsETH markets on Base and OP Mainnet. Users will receive advance notice and be encouraged to repay outstanding loans and withdraw wrsETH to avoid liquidation risk during the wind-down process.
64
+
Once minting and borrowing are disabled and the oracle is transitioned, the
65
+
community can proceed with a gradual deprecation of wrsETH markets on Base and
66
+
OP Mainnet. Users will receive advance notice and be encouraged to repay
67
+
outstanding loans and withdraw wrsETH to avoid liquidation risk during the
68
+
wind-down process.
48
69
49
70
### **Rationale**
50
71
51
-
* Disabling mint and borrow eliminates the primary vectors for further exploitation.
52
-
* Transitioning to exchange-rate feeds ensures stable and accurate valuation until the market can be fully deprecated.
53
-
* The measured approach, risk-off first, gradual deprecation later, balances user protection with operational continuity.
72
+
- Disabling mint and borrow eliminates the primary vectors for further
73
+
exploitation.
74
+
- Transitioning to exchange-rate feeds ensures stable and accurate valuation
75
+
until the market can be fully deprecated.
76
+
- The measured approach, risk-off first, gradual deprecation later, balances
77
+
user protection with operational continuity.
54
78
55
79
### **Voting Options**
56
80
57
-
Yes: Disable mint/borrow for wrsETH on Base and OP Mainnet and transition to exchange-rate feeds
58
-
No: Maintain the status quo.
59
-
Abstain: No preference
81
+
Yes: Disable mint/borrow for wrsETH on Base and OP Mainnet and transition to
82
+
exchange-rate feeds No: Maintain the status quo. Abstain: No preference
0 commit comments