Lending without a price oracle: deleting an attack surface instead of defending it
BlazePhoenix Engineering · updated 2026-07-17 · 6 min · written from the deployed bytecode
Abstract in 15 languages · resumo · resumen · 摘要 · 要旨 · ملخص
English — The collateral IS the borrowed asset (BZPX both sides), so no price oracle exists anywhere in the contract — oracle manipulation, DeFi's costliest exploit class, has literally nothing to attack.
Português — O colateral É o ativo emprestado (BZPX dos dois lados), por isso não existe oráculo de preço em lado nenhum do contrato — a manipulação de oráculos, a classe de exploit mais cara do DeFi, não tem literalmente nada para atacar.
Español — El colateral ES el activo prestado (BZPX en ambos lados), así que no existe oráculo de precios en ninguna parte del contrato — la manipulación de oráculos, la clase de exploit más costosa de DeFi, no tiene literalmente nada que atacar.
Français — Le collatéral EST l'actif emprunté (BZPX des deux côtés) : aucun oracle de prix n'existe nulle part dans le contrat — la manipulation d'oracle, la classe d'exploit la plus coûteuse de la DeFi, n'a littéralement rien à attaquer.
Deutsch — Die Sicherheit IST das geliehene Asset (BZPX auf beiden Seiten), also existiert nirgendwo im Contract ein Preisorakel — Orakelmanipulation, die teuerste Exploit-Klasse der DeFi, hat buchstäblich nichts anzugreifen.
Русский — Залог И ЕСТЬ заимствуемый актив (BZPX с обеих сторон), поэтому ценового оракула в контракте нет нигде — манипуляции оракулом, самому дорогому классу эксплойтов DeFi, буквально нечего атаковать.
Türkçe — Teminat, ödünç alınan varlığın KENDİSİDİR (iki tarafta da BZPX); sözleşmenin hiçbir yerinde fiyat oracle'ı yoktur — DeFi'nin en pahalı istismar sınıfı olan oracle manipülasyonunun saldıracak hiçbir şeyi kalmaz.
العربية — الضمان هو نفسه الأصل المقترض (BZPX من الجانبين)، فلا يوجد أي أوراكل سعر في أي مكان من العقد — تلاعب الأوراكل، أغلى فئة استغلال في DeFi، لا يجد حرفياً شيئاً يهاجمه.
हिन्दी — संपार्श्विक ही उधार लिया गया एसेट है (दोनों तरफ BZPX), इसलिए कॉन्ट्रैक्ट में कहीं भी प्राइस ओरेकल नहीं है — ओरेकल मैनिपुलेशन, DeFi की सबसे महंगी एक्सप्लॉइट श्रेणी, के पास हमला करने को सचमुच कुछ नहीं।
日本語 — 担保は借入資産そのもの（両側ともBZPX）なので、コントラクトのどこにも価格オラクルが存在しません。DeFi最大の損失源であるオラクル操作には、攻撃対象が文字通り存在しないのです。
中文 — 抵押品就是被借出的资产（两边都是 BZPX），因此合约中任何地方都不存在价格预言机——预言机操纵这一 DeFi 损失最惨重的攻击类别，字面上无物可攻。
한국어 — 담보가 곧 차입 자산입니다(양쪽 모두 BZPX). 따라서 컨트랙트 어디에도 가격 오라클이 없습니다. DeFi에서 가장 큰 손실을 낸 오라클 조작 공격은 말 그대로 공격할 대상이 없습니다.
Bahasa Indonesia — Agunan ADALAH aset yang dipinjam (BZPX di kedua sisi), jadi tidak ada oracle harga di mana pun dalam kontrak — manipulasi oracle, kelas eksploit termahal di DeFi, benar-benar tak punya apa pun untuk diserang.
বাংলা — জামানতই হলো ধার করা সম্পদ (দুই পাশেই BZPX), তাই কন্ট্রাক্টের কোথাও প্রাইস ওরাকল নেই — ওরাকল কারসাজি, DeFi-র সবচেয়ে ব্যয়বহুল এক্সপ্লয়েট শ্রেণি, আক্রমণ করার মতো আক্ষরিক অর্থেই কিছু পায় না।
Filipino — Ang collateral MISMO ang hiniram na asset (BZPX sa magkabilang panig), kaya walang price oracle kahit saan sa kontrata — ang oracle manipulation, ang pinakamahal na uri ng exploit sa DeFi, ay literal na walang maatake.
Most lending exploits are oracle exploits: manipulate the price feed for one block and the protocol believes your collateral is worth more, or your debt worth less. Every defense — TWAPs, medians, deviation guards — is mitigation. BlazePhoenix staking uses deletion: the collateral and the borrowed asset are the SAME token (BZPX), so the exchange rate between them is 1 by definition, forever. No oracle exists in the contract because no price is ever needed. You cannot manipulate a feed that is not there.
The parameters that remain are pure ratios on one asset: borrow up to 50% of effective stake, liquidation at 95% debt-to-stake, 5% seizure bonus to the liquidator, and a kinked interest curve — 100→500 bps annual up to 80% utilization, then a steep 72,500-bps slope that makes near-total utilization economically absurd, protecting exit liquidity for withdrawers.
Commitment as a first-class primitive
There is no liquid staking here by design: every deposit commits for 90 to 2,555 days, and a decreasing countdown caps any new lock at the time remaining in the 7-year emission (180M BZPX, strictly linear, with empty-pool intervals advancing the clock so no latecomer can capture a backlog). The boost curve is continuous, not tiered: boost(d) = 1 + 0.075·(d/365) + 0.025·(d/365)² — a 1-year lock earns 1.10x, 5 years 2.00x, the full 7 years 2.75x.
Two rules keep commitments honest: locks can be extended but never shortened, and a position must be FULLY debt-free before any stake withdraws. There is no early-exit-with-penalty path to game — the exit rule is the same arithmetic for everyone.
Do not trust this page — reproduce it
Every claim above is checkable against the chain. Start here:
cast call 0x3f60C7aa0c36a78D200405feBE143d2Cf3fA0c77 "boostByDays(uint256)(uint256)" 1825 --rpc-url https://mainnet.base.org — returns 20000 (2.00x for a 5-year lock)Contracts are verified on every chain we deploy to — addresses in the protocol manifest. Deeper formal treatment: the whitepaper (PDF).