MetronomeDAO has disclosed a $15.7 million hole in its synthetic asset reserves, the result of an oracle lag that trading bots quietly exploited over several months. The shortfall — roughly 6,367 msETH and 4.57 million msUSD — now sits without collateral backing.
How the exploit worked
The protocol's swap module relied on price data that didn't update fast enough. Bots spotted the delay and repeatedly traded against stale prices, draining value from the system. The attack wasn't a single heist; it was a slow bleed that went unnoticed until the cumulative damage became impossible to ignore.
MetronomeDAO's team said the exploit took advantage of a lag in the oracle feed, which feeds real-time prices into the swap function. By the time the protocol registered a price change, the bots had already executed trades at the old rate. Over weeks and months, those small edges added up to millions.
Scale of the uncovered shortfall
The missing collateral represents about 31% of all msETH in circulation and 16% of all msUSD. That means roughly one in every three msETH tokens is now unbacked. For msUSD, it's about one in six. The numbers suggest the exploit was both systematic and sustained.
MetronomeDAO hasn't named the bots or any individuals behind the trades. Investigators are still working to trace the flow of funds, but the protocol's own disclosure makes clear that the shortfall is real and that no immediate fix has restored the missing collateral.
What happens next
The DAO now faces a choice: find a way to recapitalize the synthetic assets, or let the market absorb the loss. No formal proposal has been put forward yet. The team has said it's exploring options, but hasn't given a timeline for a decision.
For users holding msETH or msUSD, the uncertainty is immediate. The tokens are supposed to be fully collateralized. Right now, they're not. Whether the DAO can raise new funds, or whether the shortfall will be written off, remains an open question.
