Эксперты подсчитали сопутствующий ущерб от взлома Stream Finance

cryptonews.ruPublished on 2025-11-03Last updated on 2025-11-04

Убытки по крупным кредитным и залоговым позициям рискуют превысить $280 млн

Атака на DeFi-протокол Stream Finance может привести к сопутствующим убыткам на сумму около $285 млн, затронув залоговые и кредитные позиции. К такому выводу пришли аналитики YieldsAndMore (YAM).

This is a massive loss. It's unclear how this will be settled in between xUSD/xBTC/xETH holders and lenders against these tokens, so let’s go over all stablecoins/vaults that have (in)direct exposure to Stream.

Best we can tell, these stablecoins have indirect exposure:
Elixir’s… https://t.co/QEPsWf1fM2

— YAM 🌱 (@yieldsandmore) November 4, 2025

4 ноября платформа приостановила работу после взлома на $93 млн. Инцидент вызвал потерю привязки токена Staked Stream USD (xUSD) — монета обвалилась с $1,3 до $0,3.

«Это колоссальные потери. Неясно, как урегулируют вопросы между держателями xUSD/xBTC/xETH и кредиторами, использующими эти токены», — отметили в YAM.

По данным исследователей, крах xUSD затронула несколько «стабильных монет» и казначейства. Среди стейблкоинов пострадать могли два проекта:

  • deUSD: эмитент токена Elixir предоставляет Stream кредит в размере 68 млн USDC. Сумма составляет 65% от обеспечения deUSD. Основной кошелек Stream занимает эти средства под залог xUSD. В Elixir заявляют, что имеют «полное право выкупа по $1 у Stream в рамках кредитной позиции». Но команда взломанного протокола не может выплатить средства, «пока юристы не определят, кто сколько должен»;
  • scUSD от Treeve: eliteRingsScUSD обеспечен veUSD → veUSD обеспечен stkscUSD → stkscUSD обеспечен scUSD, который находятся в «залоговом круге» на платформах Mithras, Silo и Euler под обеспечение в xUSD.

Общая задолженность Stream Finance на сумму $285 млн перед DeFi-кредиторами приходится на следующие платформы:

  • TelosC — $123,6 млн;
  • Elixir (под вопросом) — $68 млн;
  • MEV Capital — $25,4 млн;
  • Varlamore — $19,1 млн;
  • Re7 — $14,2 млн;
  • Enclabs — $2,5 млн;
  • Mithras — $2,3 млн;
  • TiD — $0,3 млн;
  • Invariant Group — $720 000.

Также в зоне риска находятся «синтетические» токены xUSD, xBTC и xETH. Они используются в качестве залога на Euler, Silo, Morpho и Sonic.

«Картина пока неполная. Мы ожидаем, что по мере закрытия позиций и проверки кредитных контрактов будет выявлено больше пострадавших казначейств», — отметили в YAM.

Напомним, 3 ноября стало известно о взломе DeFi-протокола Balancer. Хакеры вывели по меньшей мере $128 млн.

Related Reads

Beyond Private Keys: From Wallets and L2 to Supply Chains, How to Guard the Security Perimeter of Web3?

Beyond Private Keys: Securing Web3's Expanding Attack Surface from Wallets to L2s and Supply Chains The crypto space faced a wave of security incidents in June, with over $75 million lost across 40 major attacks. These breaches highlighted risks beyond private key theft, exposing vulnerabilities across the entire user interaction chain. Wallet security was compromised not through stolen seed phrases, but via a critical flaw in the Cardano wallet SecondFi's signing implementation. This bug allowed attackers to potentially derive private keys from publicly visible signature data, emphasizing that wallet security depends on correct cryptographic implementation, ideally in open-source, auditable code. Layer-2 networks also revealed complex trust chain risks. Attacks on legacy Aztec deployments exploited inconsistencies in proof systems, showing that a valid zero-knowledge proof is only as secure as its underlying rules. Another attack on Taiko's SGX-based prover stemmed from a leaked signing key and inadequate verification checks. Furthermore, a technical glitch halted Base's block production, underscoring that L2 security encompasses network availability and reliable user exit paths as much as asset safety. Finally, the Polymarket incident demonstrated that even audited smart contracts are not immune. A compromised third-party supplier led to a malicious script being injected into the platform's frontend, resulting in user fund losses. This "supply chain attack" shows that the security of the entire interaction path—from the webpage to the wallet signature—is critical. The conclusion is clear: Web3 security now involves safeguarding the entire journey from transaction intent to on-chain settlement. Users must adopt layered security habits: isolating long-term holdings, using dedicated wallets for daily interactions, scrutinizing transaction details before signing, and managing authorizations cautiously. Defense must evolve from protecting a single point (the private key) to securing a complete chain of interactions.

marsbit30m ago

Beyond Private Keys: From Wallets and L2 to Supply Chains, How to Guard the Security Perimeter of Web3?

marsbit30m ago

Robinhood Chain Goes Viral in One Week: Memes Drive Traffic, Stablecoins Support TVL

Robinhood Chain, an Arbitrum-based Layer 2 network launched on July 1st, experienced explosive growth in its first week. While meme coin hype drove user activity, stablecoin deposits fueled its surge in Total Value Locked (TVL). The chain's rapid adoption was driven by multiple factors. CEO Vlad Tenev reversed his initial stance, endorsing the chain for meme coins despite its original focus on Real-World Assets (RWA). The integration of the popular Solana-based launchpad Pump.fun significantly lowered the barrier for meme trading. Furthermore, the prediction market application World announced a migration from Solana to Robinhood Chain. Meme coin mania, led by tokens like CASHCAT, generated massive trading volume, with daily active addresses skyrocketing from near zero to hundreds of thousands. However, the primary driver of the chain's TVL, which soared past $234 million, was a major institutional deposit. Ethena injected approximately $50 million in stablecoins into the Morpho lending protocol, which underpins Robinhood's Earn product, accounting for the bulk of locked value. This highlights two concurrent narratives: retail-driven meme speculation boosting transactions, and institutional stablecoin deposits building foundational liquidity. In contrast, the chain's flagship RWA offerings, like tokenized stocks, remain a minor part of the ecosystem at around $12.8 million. The first week demonstrates a path where speculative trading and yield-seeking capital provide initial momentum, while the core RWA vision is still in early development.

Foresight News1h ago

Robinhood Chain Goes Viral in One Week: Memes Drive Traffic, Stablecoins Support TVL

Foresight News1h ago

Kazakhstan’s new crypto adoption push: Stablecoin rules, tax exemptions explained!

Kazakhstan has taken a major step to become a regulated crypto hub. President Kassym-Jomart Tokayev signed a decree, prepared with the Ministry of AI and Digital Development, to establish a formal framework for the digital asset market. The rules aim to boost investment and adoption through key measures. These include tax exemptions on individual income from crypto transactions, provided users disclose holdings on foreign platforms and move them to domestic, regulated exchanges. The decree also outlines a framework for stablecoin payments and a plan to allocate surplus state electricity to crypto mining to stimulate regional investment. Officials, including Deputy Prime Minister Zhaslan Madiyev, state the goal is to attract global capital by making digital assets as secure as traditional finance. Kazakhstan, already the world's third-largest in Bitcoin mining hashrate, aims to join jurisdictions like the UAE and Singapore with clear crypto regulations.

ambcrypto1h ago

Kazakhstan’s new crypto adoption push: Stablecoin rules, tax exemptions explained!

ambcrypto1h ago

The Illusion of a Prodigy

The Illusion of the "Genius Youth" The article discusses the recent interview incident involving Li Bojie, a former "Huawei Genius Youth," and AI company DeepSeek. It highlights the core conflict not as a simple case of suspected cheating during a coding test, but as a profound mismatch in expectations. Li, with an impressive background including entrepreneurship, a role at Huawei, and a position as a chief scientist, was deeply affected by a standard remote interview where the interviewer questioned his actions. The key point is his stated view of DeepSeek as the "pinnacle of the Chinese tech world." For him, the interview was a quest for identity validation—proof he belonged at the center of the new AI era. For DeepSeek, it was a routine skills assessment. The article argues that Li, while publicly rejecting the "genius" label, subconsciously expected to be treated as a peer for discussion, a courtesy extended by other companies like MiniMax and Xiaomi. DeepSeek, however, adhered strictly to its standardized process, prioritizing consistent, merit-based evaluation over individual prestige. This clash symbolizes a larger shift in the tech industry. The core thesis is that the AI era is dismantling the old system where past titles, companies, and accumulated experience guaranteed status. Now, with rapid knowledge obsolescence, "excellence is calculated in real-time." Li's anxiety—waiting weeks for the DeepSeek interview despite other offers—stems from the fear that rejection means being left behind by technological progress. The article concludes that this incident is a harbinger; soon, everyone will face a constant, implicit "interview" with the AI age itself, asking: "You were excellent yesterday. What about today?"

marsbit1h ago

The Illusion of a Prodigy

marsbit1h ago

Vanguard Group Enters the Arena, Opening a New Crypto Portal for 50 Million Traditional Investors

Vanguard Group, the world's second-largest asset manager with $12 trillion in assets under management and over 50 million investors, has signaled a significant strategic shift by posting a job opening for a "Head of Digital Assets, Personal Wealth." The role entails developing a comprehensive digital asset strategy, establishing long-term plans, and overseeing the full integration of digital assets into Vanguard's wealth management platform, covering areas like custody, settlement, asset tokenization, and stablecoins. This move marks a notable reversal from the firm's previous stance. In 2024, Vanguard refused to list spot Bitcoin ETFs and removed Bitcoin futures products. By late 2025, it allowed some third-party crypto ETF trading but reiterated it would not create its own crypto funds. The new hire represents a third step: building an internal team to integrate digital assets into its core infrastructure, moving beyond merely listing products. The initiative focuses on foundational financial infrastructure—how tokenized assets and digital settlement systems can connect to Vanguard's existing platform, which primarily serves long-term, conservative investors. While Vanguard maintains it will not launch proprietary crypto ETFs, it is proactively preparing its systems for a future involving tokenized assets and stablecoins, which Citigroup projects could reach a $5.5 trillion market by 2030. Vanguard's scale means its chosen standards for custody, settlement, and compliance could set de facto rules for the broader wealth management industry. The firm is acting despite regulatory uncertainty and cautious market sentiment (e.g., Citi recently lowered crypto price targets). Analysts suggest even a minimal 0.01% allocation from Vanguard's asset base would bring ~$12 billion into digital assets, forcing the development of robust risk and operational frameworks. Ultimately, Vanguard's focus is on building the plumbing for digital assets to potentially serve its vast client base, an effort whose impact may extend far beyond any single market cycle.

Foresight News1h ago

Vanguard Group Enters the Arena, Opening a New Crypto Portal for 50 Million Traditional Investors

Foresight News1h ago

Trading

Spot
活动图片

Hot Categoriesright-arrow

Hot Tagsright-arrow