How tokenized stocks fail as collateral even when the stock price does not move

DeFi lending protocol Edel disclosed a $403,000 exploit that hit the layer where tokenized stocks are trying to become DeFi collateral.

Edel said no depositor would bear losses, and the team would absorb the bad debt, restore affected balances one-to-one, and rebuild the protocol’s oracle architecture for a version two release.

The attack manipulated the exchange rate between wGOOGLx, a wrapped version of Edel’s tokenized Google stock, and GOOGLx, the token it wraps. Edel said the manipulation pushed wGOOGLx’s collateral value to roughly 78 times its correct level.

SlowMist traced the root cause to Edel’s price source, which used latestAnswer() to return an ERC-4626-style vault’s convertToAssets() rate. That conversion rate can be manipulated when an attacker controls enough of the underlying flow, and Edel’s price feed reads it directly.

CertiK described the same flaw from the lending side: the attacker manipulated wGOOGLx’s collateral price, which tracked its GOOGLx balance, then borrowed against the inflated value.

GoPlus noted that the attacker used a flash loan to repeatedly supply and borrow, distorting the wGOOGLx/GOOGLx conversion rate. The inflated collateral then supported real borrowed assets, including 384,215 USDC and wrapped positions in SPYx, QQQx, MSTRx, NVDAx, and TSLAx.

Security firms published different estimates. Cyvers put the loss at roughly $353,000, GoPlus cited about $403,000 in losses and roughly $305,000 in attacker profit, and CertiK put the drained funds at roughly $204,000.

The gap appears to reflect different measurements, including bad debt, gross loss, and net attacker profit.

The disconnect probably comes from each firm measuring something different, such as bad debt, gross loss, or net profit.

The critical failure sat in the exchange rate between the wrapped token and its underlying counterpart, a relationship that Edel’s lending market priced as though it were stable. Alphabet’s share price did not drive the exploit.

The market in numbers

RWA.xyz puts tokenized stocks’ onchain value at $1.7 billion, up 2.17% over the past 30 days. Monthly transfer volume sits at $8.92 billion, and holders at over 396,000.

xStocks alone lists more than 100 stocks and ETFs across more than 50 integrated platforms, with over $25 billion in total transaction volume. It describes itself as fully backed and open to plugging into any DeFi protocol without permission.

Backed, the issuer behind xStocks, markets the tokens explicitly for DeFi use: lending tokenized Apple shares or borrowing against them without selling.

Kamino says it became the first major lending protocol to accept tokenized equities as collateral, allowing users to deposit tokens such as SPYx, QQQx, GOOGLx, AAPLx, NVDAx, TSLAx, MSTRx, and HOODx to borrow stablecoins or earn yield.

Robinhood launched stock and ETF tokens for EU customers in June 2025, then opened a public testnet for Robinhood Chain. The network is an Ethereum layer-2 built on Decisiondesigned around tokenized real-world assets including equities, ETFs, and private assets.

The selling point across all of this is the same: tokenized stocks should move and connect like any other crypto asset. Edel is a reminder that once they move like crypto, they can also break like crypto.

The disconnect between backing and safety

A lending market prices several layers, such as the tokenized equity itself, the wrapped version built on top of it, and the exchange rate a vault uses to convert between the two.

It also prices the oracle path that reports a value, the lending market’s own borrowing limits, and whether that collateral can actually be sold during a period of stress. Edel’s exploit sat almost entirely in the wrapper and oracle layers.

Using a tokenized stock as collateral adds a second pricing problem on top of the equity itself. A protocol also has to price every on-chain representation built around that stock, including how a wrapper’s exchange rate behaves under stress. That exposure comes from the collateral integration built around a tokenized stock.

Flash loans, collateral manipulation, and ERC-4626 exchange-rate attacks have all shown up in DeFi exploits before. This exploit’s novelty lies in the asset class these techniques target, and it appears to be one of the first clear tokenized-stock-collateral exploits on record.

How this plays out

In the bull case, protocols spend the next year isolating wrapper risk. That means capping how much collateral in a lending market can come from wrapped tokenized stocks, separating issuer-level prices from wrapper exchange rates, and building oracle paths that a single flash loan cannot move.

Tokenized equities then become credible collateral for conservative borrowing against liquid names like Apple, Nvidia, Teslaand Google. Edel ends up remembered as the early failure that forced better design before the category scaled.

In the bear case, listings outrun the risk work. More venues accept tokenized stocks as collateral before oracle design and wrapper isolation catch up.

The number of wrapped tokens, bridges, and vaults built around each ticker keeps multiplying faster than anyone can audit them.

Along that path, more exploits in the low hundreds of thousands of dollars continue to surface involving exchange-rate manipulation and thin liquidity. Tokenized stocks have become a security flashpoint over how DeFi protocols use them as collateral.

The first phase of tokenized stocks was access: letting eligible users hold tokenized exposure to names such as Apple or Google. The second phase was tradingwhich involved making that claim move across chains around the clock.

Edel arrived at the start of the third phase, collateral, where holding a tokenized stock also allows borrowing against it.

The first two phases of tokenized stocks rewarded whoever listed the most tickers or reached the most chains. The next one rewards whoever can price a wrapped stock correctly under stress, every time.