dYdX's v3 Insurance Fund Loses $9 Million to Suspected YFI Market Manipulation

Over a single weekend, dYdX's v3 protocol lost close to 40% of its insurance fund — around $9 million — in what founder Antonio Juliano later called a "targeted attack" built around manipulation of Yearn Finance's YFI token.

The fallout wasn't limited to the exchange itself. YFI had roughly doubled in price over the preceding week, then crashed by around 40%, wiping out an estimated $200 million in market capitalization and leaving a chart pattern typical of a pump-and-dump.

Several social-media accounts jumped to the conclusion that insiders had dumped the token. That explanation doesn't fit the evidence. The crash was actually the result of cascading liquidations hitting leveraged YFI long positions on dYdX — positions whose holders appear to have been chasing a strategy that bore an uncomfortable resemblance to the one Avraham Eisenberg used against Mango Markets, a strategy that didn't end well for him either.

dYdX confirmed what had happened in an official statement: about $9 million from the v3 insurance fund had been used overnight to cover shortfalls from liquidations processed in the YFI market, leaving $13.5 million still in the fund. The exchange emphasized that no user funds were affected and said its team was investigating.

Juliano went further in a follow-up thread, laying out the mechanics behind the move. According to him, YFI open interest on dYdX spiked from about $0.8 million to $67 million within a few days — a surge he traced, via on-chain fund movements, to a single actor. That same actor, he said, had made an unsuccessful attempt to target dYdX's SUSHI market roughly two weeks earlier using a comparable approach. He noted that YFI open interest on dYdX had grown larger than on any other perpetuals venue, and that the crash in YFI's spot price looked like a deliberate move — by the same party or a different one — to hit dYdX's oversized exposure, adding that the team was cross-checking this theory with centralized exchanges. His conclusion: the pattern pointed to intentional manipulation by a well-capitalized actor or actors aiming specifically to drain the insurance pool.

dYdX said it expected to eventually identify the party responsible, and offered bounties for tips, while ruling out any direct negotiation with the attacker.

The exchange's immediate response was to tighten margin requirements on thinly traded tokens. That move drew pushback from parts of the community, some of whom accused the team of hypocrisy and of bypassing the decentralized governance process the protocol is supposed to follow. Juliano brushed the criticism aside, effectively saying it didn't change anything.

The episode highlights a structural challenge facing lending and margin systems that differs from simpler DEX infrastructure: while core exchange code can largely be left alone once shipped, risk parameters need continual adjustment as market conditions shift. dYdX's planned move to its own standalone chain is expected to hand that adjustment process over to full decentralization — though it remains to be seen whether spreading risk-management authority across a community actually prevents incidents like this one, or simply makes it harder to pin down who's accountable when they happen.