Bessie Liu

Around $9 million in dYdX v3’s insurance fund, roughly 40% of its total v3 funds, was used to process liquidations after an organized attack this weekend.&nbsp;



According to dYdX founder Antonio Juliano, the open interest (OI) for YFI, DeFi protocol Yearn Finance’s native token, had spiked from $0.8 million to roughly $67 million on the decentralized exchange (DEX), trading at a significantly higher price than other perpetual trading platforms.&nbsp;



OI refers to the amount of all outstanding derivative contracts and keeps track of all unsettled positions. The greater amount of contracts, the higher the OI.&nbsp;



This was the result of one malicious actor, Juliano <a href="https://twitter.com/antoniomjuliano/status/1725976971245469807?s=46&amp;t=yjAdM2ddX0KgGQimu7jcDQ">wrote on X</a>, pointing at <a href="https://etherscan.io/token/0x0bc529c00c6401aef6d220be8c6ea1667f6ad93e?a=0x48f928e9e64772230380e2ad9a04610bcde03594">on-chain transactions,</a> noting that it was likely that this same actor had also attempted a similar attack on the SUSHI market on dYdX just two weeks ago.



As an immediate solution, dYdX increased the initial margin ratios for YFI and other less liquid markets. These include EOS, AAVE, 1NCH, SHUHI, and CELO tokens, just to name a few. This move, Juliano noted, was ‘ultimately not sufficient.’



The price of YFI tokens crashed, which had risen over 200% between Oct. 20, 2023 and Nov. 17, plummeted about 35% in the space of one hour, Saturday.



“The actor was able to withdraw a good amount of $USDC from dYdX right before the price crash,” Juliano wrote on <a href="https://twitter.com/antoniomjuliano/status/1725976971245469807?s=46&amp;t=yjAdM2ddX0KgGQimu7jcDQ">X</a>.&nbsp;



Additionally, according to <a href="https://debank.com/profile/0x7d544a853dbcd39a53315e7002f4951a6d2f080d/history">on-chain transactions,</a> one whale was able to sell 96 YFI for an estimated $1.23 million in ether before the token tumbled.&nbsp;



dYdX has not immediately responded to Blockworks&#8217; request for commentary.&nbsp;



The dYdX team is currently working with centralized exchanges to confirm further details about the incident, and the decentralized exchange <a href="https://twitter.com/dYdX/status/1725986476943385062">posted on X</a> that it has <a href="https://twitter.com/dYdX/status/1725986476943385062">banned</a> trading on “highly profitable strategies,” an ironic reference to the exploits of <a href="https://blockworks.co/tag/avraham-eisenberg">Avraham Eisenberg</a>, who allegedly pulled off <a href="https://blockworks.co/news/mango-markets-exploit-plot-revealed">a similar stunt in October 2022</a> on Solana DeFi platform Mango Markets, and was <a href="https://blockworks.co/news/avi-eisenberg-confined-to-jail">arrested on fraud charges</a>.&nbsp;&nbsp;&nbsp;



Additionally, the team has revealed that it will pay bounties to those who are most helpful in aiding the investigation, and has no plans to negotiate with the attacker.



“We and others have made significant progress into identifying the attacker. We are in the process of reporting the information we have to the FBI,” Juliano wrote.&nbsp;



There is still an additional $13.5 million in funds in dYdX v3’s insurance fund, and no user funds have been affected by the attack, Juliano said.



Although there have been <a href="https://twitter.com/larry0x/status/1726324670826463680">criticisms</a> for a lack of decentralized governance around the latest events, Juliano notes that this particular attack occurred on dYdX v3, where the order book and matching remained centralized.



The process would be different if these events occurred on the <a href="https://blockworks.co/news/dydx-staking-goes-live">newly launched dYdX chain</a>, which has different risk controls.



<hr class="wp-block-separator has-alpha-channel-opacity"/>



Get the news in your inbox. Explore Blockworks newsletters:



<ul class="wp-block-list">
<li><a href="https://blockworks.co/newsletter/thebreakdown">The Breakdown</a>: Decoding crypto and the markets. Daily.</li>



<li><a href="https://blockworks.co/newsletter/empire">Empire</a>: Crypto news and analysis to start your day.</li>



<li><a href="https://blockworks.co/newsletter/forwardguidance">Forward Guidance</a>: The intersection of crypto, macro and policy.</li>



<li><a href="https://blockworks.co/newsletter/0xresearch">0xResearch</a>: Alpha directly in your inbox.</li>



<li><a href="https://blockworks.co/newsletter/lightspeed">Lightspeed</a>: All things Solana.</li>



<li><a href="https://blockworks.co/newsletter/thedrop">The Drop</a>: Apps, games, memes and more.</li>



<li><a href="https://blockworks.co/newsletter/supplyshock">Supply Shock</a>: Bitcoin, bitcoin, bitcoin.</li>
</ul>