TVL anomaly — % drop in <1h

Evidence summary #

TVL stable today at $1,351,889,827 (2026-04-27, -0.37% 1d, +8.87% 30d). Tier-A 30% threshold not breached. Tier-B precursor sub-rule fired on Apr 18 2026 during rsETH exploit (~$39M WETH borrowed by attacker to unknown EOA in short window). Bad debt frozen, no ongoing drain.

Detail #

Current TVL: $1,351,889,827 (DeFiLlama, 2026-04-27T03:38:24Z). 30d baseline reference: approximately $1.24B (derived from current TVL minus 8.87% 30d change). TVL_now / TVL_30d_baseline = 1.09 — well above the 0.70 tier-A threshold. The tier-B precursor sub-rule (TVL_now / TVL_(t-15m) < 0.93 AND top outflows to non-allowlisted addresses) fired on April 18, 2026 when the attacker borrowed approximately $39M WETH from V3 cWETHv3 markets and withdrew to an attacker-controlled address. The $39M represents approximately 2.9% of protocol TVL — below 30% tier-A threshold. Bad debt is now frozen in unliquidatable rsETH collateral positions. Score is yellow rather than green because of the recent tier-B precursor event (9 days ago), not because the signal is currently firing.

Sources #

Methodology #

Detect whether TVL drops >X% within 1 hour versus the trailing 30-day baseline (X configurable per protocol TVL tier).

See the full factor methodology and distribution across all protocols →