Edge Capital's weekly assessment of geopolitical risk, capital flows, protocol developments, and market structure across digital assets.
According to Wu Blockchain News and Tokenomist, total unlock value for the upcoming 7 days exceeds $330 million.
WLFI borrowed $75 million against its own token on Dolomite, pushing collateral utilization near the protocol's cap. According to Chaos Labs, WLFI-related addresses occupied 82.7% of total TVL supplied and 85.3% of total assets borrowed on Dolomite. The collateral base exceeded four times the WLFI tokens available on Binance, while only 20% of WLFI supply had been unlocked. In practical terms, there is not enough liquid supply on the open market to absorb a liquidation - the position is larger than the market it would need to unwind into.
The conflict-of-interest dimension compounds the structural risk. Corey Caplan serves as both Dolomite's co-founder and a senior figure at WLFI, meaning the issuer is borrowing against its own token on a venue linked to its own management. This arrangement concentrates protocol-level, issuer-level, and governance-level risk into a single counterparty relationship.
Justin Sun, WLFI's largest external backer, publicly alleged that large holders have been frozen out of governance voting and that WLFI's disclosures reserve the right to freeze wallets and associated tokens. Reuters confirmed that WLFI's terms do include wallet-freezing provisions tied to alleged breaches, though it could not independently verify all of Sun's specific claims. WLFI denied wrongdoing and subsequently threatened Sun with legal action. Regardless of the accuracy of individual allegations, the optics of a major holder publicly alleging vote suppression while the treasury carries leveraged self-collateralized exposure are difficult to manage in any institutional context.
WLFI has since repaid $25 million of the $75 million loan and framed the high utilization as a net positive, arguing that it generates interest income for depositors and demonstrates protocol demand. The team announced plans to release additional tokens, positioning the move as supply expansion rather than dilution.
The accompanying lockup proposal would keep 80% of early investor holdings locked for two years, followed by a two-year vesting schedule, delaying full liquidity for some holders until 2030. Founder holdings face an additional year of vesting and a 10% burn, while 75% of new token sale proceeds still flow to the Trump family. Neither path provides holders near-term liquidity or governance independence.
Weak token markets rarely fail through code vulnerabilities. They fail when governance loses credibility at the same moment leverage rises. WLFI's position now entangles price discovery, collateral quality, and governance legitimacy inside a single structure with thin liquidity. In this configuration, every governance action looks like capital structure management, and every capital structure decision looks like governance capture.
On April 18, an attacker forged a cross-chain message through KelpDAO's LayerZero-powered bridge and drained 116,500 rsETH - roughly $292M and 18% of the token's circulating supply. The exploit succeeded because Kelp's bridge relied on a single Decentralized Verifier Network (a 1-of-1 DVN configuration), meaning one compromised verification point was enough to authorize the release of funds that were never locked on the source chain. LayerZero confirmed its core protocol was not impacted. KelpDAO's emergency multisig paused contracts 46 minutes after the drain, blocking two follow-up attempts that would have taken another $100M.
This was not a smart contract bug. The attacker poisoned the RPC infrastructure feeding data to the verifier network, replacing binaries on compromised nodes to manufacture fake transaction confirmations. Healthy RPC endpoints were DDoS'd to force a failover to the poisoned nodes, leaving the single verifier no choice but to validate messages that never occurred on-chain. Preliminary indicators suggest a link to North Korea's Lazarus Group, consistent with the infrastructure-targeting approach seen in the $285M Drift Protocol exploit earlier this month. The sophistication here is worth noting: this was an attack on the plumbing, not the application.
The attacker deposited the unbacked rsETH as collateral on Aave and borrowed wrapped ether against it, creating an estimated $177M-$200M in bad debt that cannot be liquidated through normal mechanisms. SparkLend, Fluid, and Upshift froze rsETH markets. Lido paused earnETH deposits. Ethena paused its LayerZero bridges as a precaution. This is the first real-world stress test of Aave's Umbrella backstop system, and early messaging has already softened from "Umbrella will cover the deficit" to "explore paths to offset" it.
This exploit reinforces a pattern visible across DeFi in 2026. Cumulative losses have reached $450M-$480M across roughly 45 protocols this year, and the attack vectors are increasingly targeting infrastructure layers - bridges, RPC providers, oracles, and off-chain verification systems - rather than smart contract logic.
Disclaimer
This communication is for information purposes only and is not an advertisement, an offer, invitation or a solicitation to invest. Nothing in this communication constitutes financial, legal, or tax advice. Edge Capital makes no warranties as to the accuracy, completeness, or timeliness of any information provided. Any investment decision should be based on an investor's individual circumstances and made after seeking professional advice.
The performance and value of any financial product may fluctuate and may be subject to sudden and large movements that can result in substantial losses. Past performance is no guarantee of future results.
