Venus Protocol, a decentralized finance (DeFi) lending platform on BNB Chain, is investigating unusual activity after an address allegedly used the illiquid $THE token as collateral to extract roughly $3.7 million in digital assets before large-scale liquidations began.
Incident Details: Collateral Manipulation and Asset Extraction
Onchain and social media alerts first surfaced on March 15, 2026, when blockchain observers noticed abnormal borrowing activity tied to wallet address 0x1a35bd28efd46cfc46c2136f878777d69ae16231. Analysts say the wallet supplied a large amount of $THE tokens—estimates range from about 8.8 million to over 50 million tokens—to Venus’ lending market. Because the asset has relatively low liquidity, analysts suspect the token’s price may have been temporarily inflated through coordinated trades or flash-loan activity, increasing its borrowing power within the protocol.
With the collateral valuation elevated, the address borrowed other assets: approximately 20 BTCB (worth ~$1.43 million), 1.5 million CAKE (~$2.18 million), and 200 WBNB (~$132,000), bringing the combined value to roughly $3.7 million. As the value of the collateral fell and the position became undercollateralized, liquidation bots began repaying portions of the debt, triggering large liquidation events across the affected markets.
Bad Debt and Protocol Response
Preliminary community estimates suggest Venus may be left with roughly $1.7 million to $2 million in bad debt, largely associated with the CAKE market. Tens of millions of $THE tokens were reportedly pushed into liquidation queues as the collateral position collapsed. Venus Protocol confirmed the incident in a statement posted on X, writing that it had identified “unusual activity involving the $THE pool” and was investigating the matter. The team said the activity appears limited to the $THE and $CAKE markets, with no evidence of a broader protocol compromise.
Analysts note the event appears to involve manipulation of collateral mechanics rather than a direct vulnerability in the Venus smart contract code. The timing has also drawn attention because a Venus governance proposal to remove $THE as collateral was reportedly scheduled for consideration soon. The governance process may now determine how the platform addresses the resulting bad debt or potential recovery actions.
Implications and Industry Warnings
As of early Sunday, the suspected exploiter’s wallet remained active on BNB Chain with the extracted assets still visible onchain. Venus has not announced a protocol-wide pause. This incident underscores the risks of illiquid tokens serving as collateral in DeFi protocols and highlights the need for rapid governance responses. Regulators may increase scrutiny of similar events, pushing for stricter collateral evaluation standards.
For Venus users, funds currently appear safe but monitoring of CAKE and $THE market liquidations is advised. The broader industry consensus leans toward implementing dynamic collateral valuation mechanisms to prevent such price-manipulation exploits from recurring.