$93 Million Casually Misappropriated? The Truth Behind the Stream Finance Collapse

marsbitPublished on 2025-12-17Last updated on 2025-12-17

Abstract

Stream Finance, a DeFi yield protocol with over $200M TVL, collapsed on November 4, 2025, after announcing a $93M loss caused by an "external fund manager." Its stablecoin xUSD plummeted 77%, triggering a $285M contagion across lending protocols like Morpho and Euler, leading to a $1B DeFi outflow. Initially blamed on "Curator" risk managers, the truth emerged from a December 8 lawsuit: founder Caleb McMeans had transferred protocol control to trader Ryan DeMattia with "no formal relationship." On October 10, DeMattia’s personal leveraged positions were liquidated during an ETH crash, and he allegedly used Stream’s funds to cover his losses—weeks before the Balancer hack (November 3) was falsely cited as the cause. The disaster was amplified by xUSD’s recursive lending structure but rooted in unregulated, off-chain asset control without multisig or custody safeguards. The incident highlights DeFi’s vulnerability to opaque operations and personal misconduct, not systemic failure of Curator models or yield strategies.

November 4, 2025, marked a "Black Tuesday" for the DeFi world.

Stream Finance, a yield aggregation protocol with a TVL that once exceeded $200 million and was touted as "The SuperApp DeFi Deserves," suddenly announced that an "external fund manager" had caused approximately $93 million in losses, and all deposit and withdrawal functions were suspended effective immediately.

Upon the news, its issued "stablecoin" xUSD flash-crashed from $1 to $0.26, a 77% drop in 24 hours. More critically, xUSD was widely used as collateral in major lending protocols like Morpho, Euler, Silo, and Gearbox—one bomb detonated, causing severe shockwaves throughout the DeFi lending market.

According to statistics from DeFi research firm Yields And More (YAM), Stream-related debt exposure reached a staggering $285 million:

  • Elixir's deUSD, which had lent 65% of its reserves (about $68 million USDC) to Stream, directly announced its closure. Its price plummeted from $1 to $0.015, nearly zero.

  • Compound suspended its USDC/USDS/USDT markets.

  • Euler froze related liquidity pools.

  • Morpho incurred bad debt.

Within a week, the DeFi market saw a net outflow of about $1 billion. Some compared this to the "Terra moment of 2025," Aave founder Stani Kulechov even warned on social media: "The next Terra Luna might be brewing."

I happened to be researching Curator in depth recently, and because of the Stream Finance incident, Curator was pushed into the spotlight. So I looked into the sequence of events to help everyone understand the full picture as much as possible.

Scapegoat: How Did Curator End Up Taking the Blame?

After the incident, public criticism quickly pointed to one role: Curator.

How was this blame shifted? Looking back at Stream's official statement on November 4th, the loss was caused by an "external fund manager."

This wording easily brings to mind the Curator role in DeFi lending protocols like Morpho and Euler—those "curators" responsible for managing liquidity pools and setting risk parameters.

The chain reaction following Stream's collapse made this narrative seem even more "confirmed":

On November 6th, Lista DAO urgently initiated a governance vote to force liquidate Vaults managed by MEV Capital and Re7 Labs—borrowing rates had soared to 800%, and the borrowers showed no signs of repayment. Re7 Labs subsequently issued a statement admitting it had an exposure of about $14.65 million in its xUSD isolated vault on Euler.

Top Curators' Vaults collectively exploding, emergency votes for forced liquidation—wasn't this a Curator problem?

BlockBeats published a widely circulated article after the event titled "DeFi's Potential $8 Billion Bomb, Only $100 Million Has Exploded So Far," attributing the collapse to "external Curators using user funds for opaque off-chain transactions" and characterizing it as a "systemic crisis of the Curator model."

Meanwhile, another "coincidence" made things even more mysterious—just one day before Stream's collapse (November 3rd), Balancer was hacked, losing approximately $128 million.

Thus, the mainstream narrative became: Curators misappropriated client funds for high-risk strategies, invested in Balancer, Balancer got hacked, money was lost, the Curator model is unreliable.

But there's a key question here: Was Curator really the core cause behind Stream's collapse?

It wasn't until December 8th, when court documents were made public, that we got a glimpse of the full picture.

The Truth Emerges: A Different Story Revealed by Court Documents

On December 8th, Stream Trading Corp. (the original Stream founding team) filed a lawsuit in San Francisco Federal Court against Caleb McMeans (online alias 0xlaw) and Ryan DeMattia.

This lawsuit revealed a completely different story.

Project Handover: A "Acquisition" Without Cash

According to a detailed report by DL News on the court documents:

In February 2024, Argentine crypto investor Diogenes Casares founded the Stream Protocol. In April of the same year, the project completed a $1.5 million seed round led by Polychain, with a valuation of $20 million.

However, after just 9 months of operation, by November 2024, the founding team decided to shut down the project due to "operational challenges."

At that moment, trader Caleb McMeans appeared. He proposed acquiring Stream, presenting himself as an "expert in managing complex yield strategies."

In January 2025, both parties signed an agreement:

  • McMeans gained full control of the protocol, including all on-chain transactions, off-chain business agreements, and user deposit management rights.

  • In exchange, he would pay the original team a 35% fee share and promised to "fully transparently disclose the deployment locations of the funds."

Note: This was not a cash acquisition—McMeans did not pay money to buy the protocol but signed a "I operate, you get fees" agreement. The original team retained the role of service provider for the smart contracts, website, and token.

Out-of-Control Assets: $90+ Million Handed to Someone with "No Formal Relationship"

The problem arose after McMeans took over. According to the lawsuit, he handed over more than $90 million in protocol assets to a person named Ryan DeMattia for off-chain management.

Who is DeMattia? The lawsuit's description is quite subtle: McMeans initially called him an "employee" but later admitted to having "no formal relationship" with DeMattia.

No formal relationship, yet he gave this person control over $90+ million in off-chain assets. Outrageous?

It gets even more outrageous.

Laptop Destroyed in a Car Crash

In September 2025, the original founding team began demanding more transparency from McMeans, wanting to know where the funds were. McMeans' response was "continuous delays and excuses."

When the team pressed DeMattia, his response was even more spectacular—direct quote from the lawsuit:

"DeMattia offered a series of patently false excuses for why he could not provide any further information, even claiming at one point that his laptop had been destroyed in a car crash."

The creativity of this excuse is perhaps only matched by "my dog ate my homework."

The lawsuit continues, stating that McMeans at the time advised the original team to "stop asking questions and just trust DeMattia."

October 10th: Personal Liquidation, Misappropriation to Cover Losses

Then, October 10th arrived.

On that day, the price of ETH plummeted 21%, setting a record for the largest single-day liquidation in crypto history, with approximately $20 billion in positions liquidated. The lawsuit describes:

"But upon information and belief, on October 10, 2025, Mr. DeMattia faced a margin call on a personal loan for which he lacked sufficient funds to cover, had his position liquidated, and then used Stream Protocol assets to which he had access to cover his loss."

Translation: DeMattia's own leveraged position was liquidated, he didn't have money to cover the margin call, so he顺手 used Stream's money to fill the hole.

On November 2nd, DeMattia finally "confessed." According to DL News:

"On November 2, he admitted he had lost 'nearly all' of the Stream protocol assets under his control, which were worth about $93 million at the time."

Timeline Mismatch: Balancer Was Just a Smokescreen

Please note this date: November 2nd.

When was Balancer hacked? November 3rd.

If Stream's $93 million was lost in the Balancer hack, the loss should have occurred on November 3rd. But DeMattia admitted on November 2nd that it was "all lost"—the timeline doesn't match.

More crucial evidence: The lawsuit points out that McMeans deleted "all private Discord communication records with DeMattia since October 10th"—exactly the day DeMattia is believed to have started misappropriating funds.

If the loss was truly due to an external event like the Balancer hack, why delete chat records starting from October 10th?

The answer becomes clear: The Balancer hack was likely just a "convenient coincidence," used to divert attention, confuse the timeline, and provide a "force majeure" smokescreen for internal misappropriation.

BlockEden's analysis report also corroborates this: "No evidence of a smart contract hack or exploit has been found."

Essence: Personal Misappropriation, Amateurish Operation

So, was this collapse caused by a systemic failure of the Curator model, or blatant amateurish behavior leading to personal misappropriation of assets?

The lawsuit provides a clear answer: This was personal misappropriation.

DeMattia was not a professional Curator institution; he was an off-chain trader privately hired by McMeans, with "no formal relationship" to the protocol. He was given actual control over $90+ million, with no custody segregation, no multi-signature protection, no on-chain verifiability—when his personal position was liquidated, he directly used users' money to fill his own hole.

The Amplifier: How xUSD Recursive Lending Blew the Hole Wider

This personal misappropriation led to a collapse that, due to xUSD's recursive lending strategy, blew a $285 million hole.

If Stream were just a simple custody protocol, DeMattia misappropriating $93 million would have resulted in at most a $93 million loss. But because xUSD was designed to be a "yield-enhanced stablecoin" that could circulate, be used as collateral, and be re-borrowed across various protocols, this $93 million hole spread like a virus through DeFi's composability, infecting the entire ecosystem.

Recursive lending was not the cause of the disaster, but it was the amplifier of its scale.

Yearn developer Schlag had warned before the collapse: "Using the same 1.9 million USDC, they minted about 14.5 million xUSD"—a 7.6x capital amplification. When the underlying assets failed, this multiplier became an accelerator of destruction.

When the underlying assets (the $93 million held by Stream) disappeared, the entire recursive lending structure instantly collapsed, inflating the debt exposure from $93 million to $285 million.

Conclusion: Review, Reflection, and the Future

Let's梳理 (organize) the complete chain of this collapse:

Starting Point: The Stream Finance project "sold" the protocol to trader McMeans, who then handed $93 million in user assets to DeMattia, with whom he had "no formal relationship," for off-chain management.

Trigger: ETH price crashed on October 10th, DeMattia's personal position was liquidated, and he directly misappropriated Stream's funds to cover his losses.

Amplifier: The xUSD recursive lending structure amplified the $93 million hole into a $285 million debt exposure, infecting the entire DeFi lending market.

Smokescreen: Balancer was hacked for $128 million on November 3rd, becoming the perfect excuse to divert attention—even though DeMattia had already admitted the loss on November 2nd.

Scapegoat: Public opinion pointed the finger at the Curator model, ignoring the real problem of personal misappropriation.

What is the essence of this collapse?

Not a failure of the Curator model

In protocols like Morpho and Euler, Curators have defined boundaries—they can set risk parameters, adjust collateral ratios, decide which assets to accept, but cannot directly transfer user funds. User assets deposited into Vaults are locked in smart contracts; Curators cannot move them.

The problem with the Curators pushed into the spotlight was "negligence": accepting problematic assets like xUSD as collateral without conducting thorough due diligence.

Not the original sin of recursive lending strategy

Recursive borrowing itself is just a tool to amplify returns and risks. Used well, it's efficient capital operation; used poorly, it's suicidal leverage. Stream's recursive lending amplified the scale of the disaster but was not its cause.

The real problem is: One person could control tens of millions of user assets without any constraints

  • No custody segregation

  • No multi-signature protection

  • No on-chain verifiable fund flow

  • No compliance audits whatsoever

  • Not even a formal employment contract

This is the most primitive betrayal of trust—handing money to a person, and that person taking it away.

This is also the current state of the DeFi industry: Amateurish operations are rampant, and regulation is absent. A DeFi protocol can be casually "transferred," user funds can be casually misappropriated, and there are no real institutional constraints at any step of the entire process.

But crisis often breeds turning points.

The Stream collapse is forcing the industry to mature. As regulatory frameworks and legislation continue to be refined and implemented, more transparent, compliant, and professional protocols and service providers represent the real future opportunity for this industry.

References:

  1. DL News: "Stream Finance founders sue business partner, allege $93m used to cover personal losses"https://www.dlnews.com/articles/defi/stream-finance-founders-sue-partner-over-alleged-93m-loss/

  2. The Defiant: "Stream Files Lawsuit Against Operator '0xlaw' Over $93 Million Loss"https://thedefiant.io/news/defi/stream-finance-files-lawsuit-against-0xlaw-mcmeans

  3. The Defiant: "How Stream Finance's Collapse Exposed DeFi's Looping Yield Bubble"https://thedefiant.io/news/defi/how-stream-finance-s-collapse-exposed-defi-s-looping-yield-bubble

  4. Lawsuit Case: Stream Trading Corp. v. McMeans, Case No. 3:25-cv-10524, U.S. District Court for the Northern District of California, filed December 8, 2025

  5. BlockEden: "Anatomy of a $285M DeFi Contagion: The Stream Finance xUSD Collapse"https://blockeden.xyz/blog/2025/11/08/m-defi-contagion/

  6. Tiger Research: "Collapse of the Defi Jenga: The Stream Finance Breakdown"https://reports.tiger-research.com/p/collapse-of-the-defi-jenga-the-stream-eng

  7. The Block: "Analysts map $285M in potential exposure across DeFi after Stream Finance's $93M loss"https://www.theblock.co/post/377491/analysts-map-285m-in-potential-exposure-across-defi-after-stream-finances-93m-loss

  8. BlockBeats: "DeFi's Potential $8 Billion Bomb, Only $100 Million Has Exploded So Far" (《DeFi潜在80亿美金的雷,现在只爆了1个亿》)

  9. Yields And More (YAM): Stream Finance Debt Exposure Analysis

  10. Re7 Labs: Statement on Stream Finance Insolvency and xUSD Exposurehttps://x.com/Re7Labs/status/1985694621251387506

Related Questions

QWhat was the main reason behind the $93 million loss at Stream Finance according to the lawsuit filed by the original team?

AAccording to the lawsuit filed by Stream Trading Corp., the $93 million loss was primarily due to personal misappropriation of funds by Ryan DeMattia, who used Stream Protocol assets to cover his personal trading losses after his leveraged positions were liquidated during the ETH price crash on October 10, 2025.

QHow did the xUSD stablecoin and its looping strategy amplify the impact of the initial $93 million loss?

AThe xUSD stablecoin was designed as a 'yield-enhanced' stablecoin that could be used as collateral for recursive lending across multiple DeFi protocols like Morpho, Euler, and Silo. This looping strategy amplified the initial $93 million loss into a total debt exposure of $285 million, as the collapse of the underlying asset caused the entire leveraged structure to fail simultaneously.

QWhy was the Balancer hack on November 3rd not the actual cause of Stream's collapse, despite initial narratives?

AThe Balancer hack on November 3rd could not have been the cause because Ryan DeMattia had already admitted to losing 'nearly all' of the $93 million in assets under his control on November 2nd, one day before the Balancer exploit. The timing discrepancy and the hack were likely used as a convenient excuse to obscure the true cause, which was internal misappropriation.

QWhat critical failures in Stream Finance's operational structure allowed this misappropriation to occur?

ACritical failures included: no custody isolation of user funds, no multi-signature protection for asset movements, no on-chain verifiability of fund flows, lack of formal compliance audits, and most notably, entrusting over $90 million to an individual (Ryan DeMattia) with whom the operator (Caleb McMeans) had 'no formal relationship' and no official employment contract.

QDid the lawsuit reveal that the problem was fundamentally a failure of the Curator model or something else?

AThe lawsuit revealed that the problem was not a fundamental failure of the Curator model used in protocols like Morpho or Euler. Instead, it was a case of primitive trust betrayal and irresponsible personal mismanagement. The actual Curators in question were guilty of negligence (e.g., accepting xUSD as collateral without proper due diligence), but they did not have the ability to directly misappropriate user funds, which are locked in smart contracts.

Related Reads

Bankless Co-founder: Why I Sold All My ETH

Author David Hoffman, founder of Bankless, explains his decision to sell all his ETH, despite being a prominent figure in the Ethereum ecosystem. He clarifies that his move is not a bearish take on Ethereum itself, which he remains highly optimistic about as a network. His core argument is that the "ETH is money" thesis, which he helped popularize, has largely played out. Hoffman argues that ETH has achieved the market valuation it deserves based on Ethereum's current success and competitive position. He details several reasons for this view. First, the path for ETH to become global money required nearly flawless execution and sustained dominance across Ethereum's entire technical and social stack—a coordination challenge he now believes had a narrower window for success than anticipated. Second, market data shows a strong correlation between L1 chain activity/fees and the price of its native asset; Ethereum's fee dominance has been challenged by competitors like Solana. Third, the "strong version" of crypto (decentralized, native crypto economies) that ETH's monetary thesis relied upon has struggled to maintain a positive mainstream narrative and stable adoption beyond a brief period. Finally, Ethereum's architecture as a "giver"—providing secure block space and tokenization capabilities at cost to L2s and applications—means it doesn't capture premium value directly. Its rollup-centric roadmap further directs most profits to L2s and applications ("fat app theory"). In conclusion, Hoffman believes the opportunity for ETH to be revalued significantly upward as money has diminished. He sold not because ETH will fail, but because its monetary thesis has matured, and he seeks to allocate capital to other opportunities he finds more compelling.

链捕手19m ago

Bankless Co-founder: Why I Sold All My ETH

链捕手19m ago

From Issuer to Infrastructure Owner: Circle's Arc Strategy and the Fatal Gap in the GENIUS Act

Circle raised $222 million for its proprietary Layer-1 blockchain, Arc, positioning itself not just as a stablecoin issuer but as the owner of the settlement infrastructure USDC relies on. This move, backed by investors like BlackRock and Apollo, highlights a significant structural conflict unaddressed by the GENIUS Act of 2025. While the act focuses on stablecoin reserves and issuer oversight, it remains silent on the market structure implications of an issuer controlling the underlying network—a scenario akin to a currency issuer also owning the payment rails. Traditionally, financial regulations separate issuers from settlement infrastructure to ensure neutrality. With Arc, Circle gains control over transaction ordering, fees, and network rules, potentially favoring USDC over competitors. The article argues that this creates a permanent structural temptation, even if no abuse occurs. The solution lies in applying established market infrastructure principles: mandating neutral transaction ordering, transparent fee schedules, and governance separated from Circle’s commercial interests. The current pre-mainnet phase offers a critical window for regulators to establish these rules before Arc becomes entrenched. Once operational, enforcing changes would be costly and disruptive. The core question remains: should a regulated stablecoin issuer be allowed to own the settlement network its competitors must use? The GENIUS Act doesn’t answer this, but Circle’s Arc strategy makes it urgent.

marsbit25m ago

From Issuer to Infrastructure Owner: Circle's Arc Strategy and the Fatal Gap in the GENIUS Act

marsbit25m ago

What Are the Key Variables Determining the AI Bull Market?

Title: What Determines the AI Bull Market? Key Variables Revealed Despite rising oil prices above $100/barrel, persistent inflation, and fragile Fed rate cut expectations—a traditionally hostile environment for high-valuation tech stocks—the AI sector continues to drive the market to new highs. According to analysts, the current AI boom is in a phase of "rational fervor": while bubbles exist, they are not yet out of control. The crucial shift is the emergence of Agentic AI, which is evolving from an assisting tool (Copilot) to an autonomous execution tool (Autopilot), creating a clearer commercial path from investment to revenue. This shift accelerates Token consumption and inference computing demand while boosting revenue forecasts for leading firms. The market is now rewarding capital expenditure as it transforms from a burden into a competitive moat, supporting hardware chains like GPUs, optical modules, and storage. However, valuations have already priced in growth expectations for 2027-2028. The forward P/E ratio for the "Magnificent Seven" tech giants is about 35x, compared to 25x for the rest of the S&P 500. This premium implies AI adoption must occur 5 to 8 times faster than past technological revolutions—a scenario with little room for error. The sustainability of the AI bull market hinges on three key variables: 1. **Short-term liquidity shocks**: Risks include sustained high oil prices, resurgent inflation, rising interest rates, and potential unwinding of the yen carry trade. The critical question is whether the upward revision speed of Annual Recurring Revenue (ARR) can outpace the rise in interest rates. 2. **Mid-term industry realization**: Can the actual pace of AI adoption and commercialization match the current lofty valuations? Historically, general-purpose technology revolutions follow a non-linear path with periods of acceleration and deceleration. 3. **Long-term structural constraints**: These include energy and power grid limitations, employment displacement and consumer purchasing power, social acceptance and potential backlash, and potential hardware technology breakthroughs that could disrupt current supply chains. While the long-term prospects for AI remain optimistic with potential for significant productivity gains, the stock market's pricing depends not just on the vision but on the actual speed of realization amid these growing constraints. The direction is clear, but the pace of execution will determine whether the bubble remains controlled or spirals out of control.

marsbit25m ago

What Are the Key Variables Determining the AI Bull Market?

marsbit25m ago

The AI Industrial Revolution: Where Are We Now?

This article explores the current stage of the AI industrial revolution, arguing we are still merely attaching new tools to old workflows rather than fundamentally redesigning production. The author compares this to the early Industrial Revolution, where factories simply replaced waterwheels with steam engines without changing their core structure. Similarly, today we embed AI chat windows into existing software but leave organizational processes unchanged. While massive investment floods into AI infrastructure (data centers, chips), akin to railway manias of the past, the real transformation lies in "dismantling the old workshop"—reorganizing companies around AI. Examples include Notion's use of hundreds of AI Agents and Y Combinator's experiments with self-improving AI systems that operate autonomously. The author notes a critical gap: while China has vast AI user growth, few companies have rebuilt core workflows. AI is beginning to impact entry-level jobs, and early adopters are gaining a compounding advantage. The conclusion is that the pivotal moment will not be the invention of better models, but when organizations decide to tear down old structures and rebuild around AI, shifting the bottleneck from human coordination to computing power. The future workplace and job titles are yet to be defined, but the imperative is to move away from legacy processes and position oneself where the new "railway" is being built.

marsbit58m ago

The AI Industrial Revolution: Where Are We Now?

marsbit58m ago

Trading

Spot
Futures

Hot Articles

How to Buy ZEST

Welcome to HTX.com! We've made purchasing Zest Protocol (ZEST) simple and convenient. Follow our step-by-step guide to embark on your crypto journey.Step 1: Create Your HTX AccountUse your email or phone number to sign up for a free account on HTX. Experience a hassle-free registration journey and unlock all features.Get My AccountStep 2: Go to Buy Crypto and Choose Your Payment MethodCredit/Debit Card: Use your Visa or Mastercard to buy Zest Protocol (ZEST) instantly.Balance: Use funds from your HTX account balance to trade seamlessly.Third Parties: We've added popular payment methods such as Google Pay and Apple Pay to enhance convenience.P2P: Trade directly with other users on HTX.Over-the-Counter (OTC): We offer tailor-made services and competitive exchange rates for traders.Step 3: Store Your Zest Protocol (ZEST)After purchasing your Zest Protocol (ZEST), store it in your HTX account. Alternatively, you can send it elsewhere via blockchain transfer or use it to trade other cryptocurrencies.Step 4: Trade Zest Protocol (ZEST)Easily trade Zest Protocol (ZEST) on HTX's spot market. Simply access your account, select your trading pair, execute your trades, and monitor in real-time. We offer a user-friendly experience for both beginners and seasoned traders.

387 Total ViewsPublished 2026.05.19Updated 2026.05.19

How to Buy ZEST

HTX Learn: Learn Hot Tokens to Share 1000 USDT​

To enhance your understanding of this week's featured cryptos, we are rolling out various rewarding events. Join them now and bring home generous rewards through learning and trading.

18.9k Total ViewsPublished 2026.05.21Updated 2026.05.21

HTX Learn: Learn Hot Tokens to Share 1000 USDT​

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of A (A) are presented below.

活动图片