What if an oracle attack spirals a lending market into bad debt?
Oracle manipulation saddling a top lender with unrecoverable bad debt triggers a deposit bank-run, so suppliers race to withdraw, utilization spikes to 100%, and the protocol token plus ETH collateral get dumped. Rhymes with the Mango Markets oracle exploit (Oct-2022, ~$115m) and Euler (Mar-2023, ~$197m) — token gapped down hard, partial recovery only on white-hat returns. Credit-spread tag is right: bad debt is a genuine on-chain solvency event, so the HY/credit read belongs here even if the macro bleed stays small.
Every number ships with its receipt — the odds, the range, the precedents, and a public grade at Reality Check. The statistical machinery that produces it is proprietary.
The butterfly cascade
How this trigger trickles across markets, left → right — the root shock, its first‑order moves, then the ripple effects. Drag any node; tap a market for its real price history.
Resolution timeline — how this probability is moving
Our model's odds (electric blue) over time vs the market's (Polymarket, amber), from the past toward the 0–6 months horizon. Each dot is a real macro event that nudged the probability — green pushed it up, red pushed it down. Tap a dot for the source. Loading the probability audit trail…
What it would mean
If this plays out, it is a mixed shock. An oracle-manipulation attack saddles a top lending protocol with unrecoverable bad debt, triggering a bank-run on deposits. The trigger decomposes into signed root‑shocks — Credit spreads ▲ · Crypto confidence ▼ — which propagate through our causal graph to the markets below.