Connect ›
Cover: Lending without a price oracle: deleting an attack surface instead of defending it

Lending without a price oracle: deleting an attack surface instead of defending it

In BlazePhoenix staking the collateral IS the borrowed asset (BZPX both sides), so no price oracle exists anywhere — oracle manipulation, the cause of hundreds of millions in DeFi losses, has nothing to attack.

BlazePhoenix Engineering · updated 2026-07-17 · data through 2026-10-11 · 6 min · written from the deployed bytecode

By Mitra (@Sigmacrit) — anonymous developer of the BlazePhoenix protocol. The code is the résumé.

Abstract in 15 languages · resumo · resumen · 摘要 · 要旨 · ملخص

English — The collateral IS the borrowed asset (BZPX both sides), so no price oracle exists anywhere in the contract — oracle manipulation, DeFi's costliest exploit class, has literally nothing to attack.

Português — O colateral É o ativo emprestado (BZPX dos dois lados), por isso não existe oráculo de preço em lado nenhum do contrato — a manipulação de oráculos, a classe de exploit mais cara do DeFi, não tem literalmente nada para atacar.

Español — El colateral ES el activo prestado (BZPX en ambos lados), así que no existe oráculo de precios en ninguna parte del contrato — la manipulación de oráculos, la clase de exploit más costosa de DeFi, no tiene literalmente nada que atacar.

Français — Le collatéral EST l'actif emprunté (BZPX des deux côtés) : aucun oracle de prix n'existe nulle part dans le contrat — la manipulation d'oracle, la classe d'exploit la plus coûteuse de la DeFi, n'a littéralement rien à attaquer.

Deutsch — Die Sicherheit IST das geliehene Asset (BZPX auf beiden Seiten), also existiert nirgendwo im Contract ein Preisorakel — Orakelmanipulation, die teuerste Exploit-Klasse der DeFi, hat buchstäblich nichts anzugreifen.

Русский — Залог И ЕСТЬ заимствуемый актив (BZPX с обеих сторон), поэтому ценового оракула в контракте нет нигде — манипуляции оракулом, самому дорогому классу эксплойтов DeFi, буквально нечего атаковать.

Türkçe — Teminat, ödünç alınan varlığın KENDİSİDİR (iki tarafta da BZPX); sözleşmenin hiçbir yerinde fiyat oracle'ı yoktur — DeFi'nin en pahalı istismar sınıfı olan oracle manipülasyonunun saldıracak hiçbir şeyi kalmaz.

العربية — الضمان هو نفسه الأصل المقترض (BZPX من الجانبين)، فلا يوجد أي أوراكل سعر في أي مكان من العقد — تلاعب الأوراكل، أغلى فئة استغلال في DeFi، لا يجد حرفياً شيئاً يهاجمه.

हिन्दी — संपार्श्विक ही उधार लिया गया एसेट है (दोनों तरफ BZPX), इसलिए कॉन्ट्रैक्ट में कहीं भी प्राइस ओरेकल नहीं है — ओरेकल मैनिपुलेशन, DeFi की सबसे महंगी एक्सप्लॉइट श्रेणी, के पास हमला करने को सचमुच कुछ नहीं।

日本語 — 担保は借入資産そのもの(両側ともBZPX)なので、コントラクトのどこにも価格オラクルが存在しません。DeFi最大の損失源であるオラクル操作には、攻撃対象が文字通り存在しないのです。

中文 — 抵押品就是被借出的资产(两边都是 BZPX),因此合约中任何地方都不存在价格预言机——预言机操纵这一 DeFi 损失最惨重的攻击类别,字面上无物可攻。

한국어 — 담보가 곧 차입 자산입니다(양쪽 모두 BZPX). 따라서 컨트랙트 어디에도 가격 오라클이 없습니다. DeFi에서 가장 큰 손실을 낸 오라클 조작 공격은 말 그대로 공격할 대상이 없습니다.

Bahasa Indonesia — Agunan ADALAH aset yang dipinjam (BZPX di kedua sisi), jadi tidak ada oracle harga di mana pun dalam kontrak — manipulasi oracle, kelas eksploit termahal di DeFi, benar-benar tak punya apa pun untuk diserang.

বাংলা — জামানতই হলো ধার করা সম্পদ (দুই পাশেই BZPX), তাই কন্ট্রাক্টের কোথাও প্রাইস ওরাকল নেই — ওরাকল কারসাজি, DeFi-র সবচেয়ে ব্যয়বহুল এক্সপ্লয়েট শ্রেণি, আক্রমণ করার মতো আক্ষরিক অর্থেই কিছু পায় না।

Filipino — Ang collateral MISMO ang hiniram na asset (BZPX sa magkabilang panig), kaya walang price oracle kahit saan sa kontrata — ang oracle manipulation, ang pinakamahal na uri ng exploit sa DeFi, ay literal na walang maatake.

Most lending exploits are oracle exploits: manipulate the price feed for one block and the protocol believes your collateral is worth more, or your debt worth less. Every defense — TWAPs, medians, deviation guards — is mitigation. BlazePhoenix staking uses deletion: the collateral and the borrowed asset are the SAME token (BZPX), so the exchange rate between them is 1 by definition, forever. No oracle exists in the contract because no price is ever needed. You cannot manipulate a feed that is not there.

The parameters that remain are pure ratios on one asset: borrow up to 50% of effective stake, liquidation at 95% debt-to-stake, 5% seizure bonus to the liquidator, and a kinked interest curve — 100→500 bps annual up to 80% utilization, then a steep 72,500-bps slope that makes near-total utilization economically absurd, protecting exit liquidity for withdrawers.

Commitment as a first-class primitive

There is no liquid staking here by design: every deposit commits for 90 to 2,555 days, and a decreasing countdown caps any new lock at the time remaining in the emission programme (180M BZPX on a biennial halving curve over sixteen years, with empty-pool intervals advancing the clock so no latecomer can capture a backlog). The boost curve is continuous, not tiered: boost(d) = 1 + 0.075·(d/365) + 0.025·(d/365)² — a 1-year lock earns 1.10x, 5 years 2.00x, the full 7 years 2.75x.

Two rules keep commitments honest: locks can be extended but never shortened, and a position must be FULLY debt-free before any stake withdraws. There is no early-exit-with-penalty path to game — the exit rule is the same arithmetic for everyone.

boost(d)=10000+750·d365+250·(d365)2
boostByDays(d) in basis points, d = lock days. d=365 → 11000 (1.10×), d=1825 → 20000 (2.00×), d=2555 → 27500 (2.75×). Continuous, not tiered.

Do not trust this page — reproduce it

Every claim above is checkable against the chain. Start here:

cast call <staking> "boostByDays(uint256)(uint256)" 1825 --rpc-url https://mainnet.base.org — returns 20000 (2.00x for a 5-year lock)
Cite this article

Licensed CC BY 4.0 — quote, translate and reuse freely, including commercially, with attribution and a link. Copy a ready-made citation:

BlazePhoenix (2026). Lending without a price oracle: deleting an attack surface instead of defending it. BlazePhoenix Engineering. https://blazephoenix.xyz/learn/oracle-free-lending
@misc{blazephoenix_oracle_free_lending,
  title  = {Lending without a price oracle: deleting an attack surface instead of defending it},
  author = {BlazePhoenix},
  year   = {2026},
  url    = {https://blazephoenix.xyz/learn/oracle-free-lending},
  note   = {Accessed: reproduce the claim with the command above}
}

Writing an answer, a wiki entry or a paper? The claim above is reproducible against the chain before you quote it — which is the only sound basis for citing a technical source at all.

Contracts are verified on every chain we deploy to — addresses in the protocol manifest. Deeper formal treatment: the whitepaper (PDF).

Related engineering

Next in Staking & yield · 4 / 4
This was the last one in Staking & yield — back to the library ›