Well boys, think I figured out (part of) the scam, and it is a doozy. Strap in. TLDR: Stream (xUSD) and Elixir (deUSD), and likely more, are recursively minting each other tokens in order to inflate there own TVL and create a ponzu the likes of which we haven't seen for awhile in crypto. NOTE: In the name of readability and due to X restrictions all txn hashes and addresses will be posted in a follow up tweet for those that wish to follow along themselves. We start our journey on mainnet, watching the flow of USDC funds that have just landed in the Stream xUSD wallet last night. 0x15 - First step is to transfer the USDC out to another Stream controlled address 0x33, in this case to the tune of $4.4m. - 0x33 places a cow swap order to buy USDT, which is paid out to 0x25. - 0x25 takes that USDT and uses it to mint the equivalent amount of deUSD from their on chain minter 0x69 - 0x25 then transfers the deUSD back to 0x33 which in turn transfers it back to the main Stream wallet 0x15. - Stream then takes that deUSD and bridges to AVAX, World chain or any other L2 that has lending markets listing sdeUSD, uses it as collateral to borrow other stables such as USDT or AUSD, swaps to USDC and bridge back to mainnet. This is repeated one or two more times with varying amounts and lending markets, but the end state is Stream mints deUSD, uses that as collateral to borrow stables and mints more. Yesterday they did 3 rounds to mint about 10m deUSD. While degenerate yes, not inherently scammy. Enter Part 2 Usually when leverage looping, the last txn is just to supply the last amount as collateral. But Stream has a special power, which is their wallet receive's all USDC used to mint their "stable" coin xUSD and boy do they use it. So with the final USDC they borrowed they recursively mint their own xUSD coin. Yesterday using the same $1.9m USDC they minted about 14.5m xUSD as shown in the tweet below. This means xUSD is not only not actually backed 1:1 but the protocol itself is the largest holder of the token. It currently controls over 60% of the xUSD in circulation, meaning if we assume all is recursively minted like this then each xUSD is backed by at most $0.40. But for what purpose? Well this is where it gets fun. The main thing to do with xUSD other than hold, is leverage loop it where listed on Euler, Morpho etc. But who would lend millions of stables against a token the protocol just minted out of thin air you ask? 🤔 Well none other than our friends at Elixir who happen to find themselves with an extra $10m newly acquired USDT. 🤯 - Step one is to transfer the $10m USDT to what their "Transparency Dashboard" labels "Elixir's sUSDS Multisig" (lol) 0x73 - Next 0x73 creates a Cow swap order to swap the USDT back to USDC and have it land in 0x1b - 0x1b bridges the $10m USDC to Plume network and then transfers it to a Safe at 0xaF8 - The Elixir Safe then supplies the USDC directly to a Morpho market that lends against, you guessed it xUSD. -This market is hidden from all available morpho UI's and Elixir is the only depositor. There is currently over $70m USDC supplied and >$65m borrowed. - Shortly after each deposit Stream will then come along with its brand new xUSD it minted to itself, borrow the USDC, bridge back to mainnet and we find ourselves back at the start of the story. Funny enough as I was writing this they seem to be kicking off another round starting with another minting of deUSD. While I did not dive fully in yet I would assume most markets that Stream uses to borrow against deUSD are also funded in similar manners, potentially by other partner "stable coins" engaging in the same tactics. It is hard to know for sure how much actual collateral is backing this full system but seems likely to be sub $0.10 per $1. Though what's a bit of leverage when you can each advertise 10-15% TVL growth overnight, just look at this beautiful chart from the Elixir dashboard showing their TVL growing about $60m in just a few weeks. (that amount sounds familiar) The exposure runs rampant through DeFi, not only just holding xUSD or deUSD but depositing into any market or curated vault that lends against them or the other Yield coins that also are at least in part backed by these. Make sure you know where your yield is coming from. Happy Farming.
Sources: TXN hashes in order referenced. Mainnet: 0xc4835f5f1f355ae035551df6f5f774d89568415f9a907740ef458775c1283cc4 0x70cd91809dbd6a52fbb7601ae239701e082ba335c0bb87ca70404afe40739671 0x9d863b0cdf29cc45083082e5162a7bf62a9ca952f85824dd97b8274a71d6db24 0x5afaf1fad461ad1ba42e8d26347fd4f48031ca4051c912db2dfc362bdae83799 0x958af9725a944e172dc0540b896fe29cfaef81bee55510f5f37cb60188becfe9 Elixir: 0x7249750aa5f90d7215b3654630cf03e1deda4cbaa5423e0d7ded302e76e02e70 0x7180552294145c8f172918d486274a974cd80f789313e417d4d8f514a3d04ef9 0x27c072131b3add46fd9d745cd855fe7cc27e15f665a200c0a87cbf96eeda0e7a Plume: 0x4c3720b72c2c265a30736ad13aa6ea7774856d503732b02885a00bcd03a65834 0xcfbd232c430e19c1fbb092b8d693a7a1e355e43e5fc5d306401628cd509ae7ab 0xed6df95aaca96539484c36bd2ef21b0ac7942df41ee96640218d1345e50d39c8 c24263CeA8
Yes I understand that this is the logic behind why they think it’s okay. But even if we were to accept the accounting practice of counting the backing of your token with itself, it is still reliant on 1. The protocol itself unwinding its full position before everyone else. 2. None of the minted tokens hitting the open market to be redeemed by others through things such as liquidations Personally I’m not super confident in either of those. Especially given they supplied these self minted tokens an ARB to Silo and Balancer markets that anyone can pull from and redeem (thus hitting the market). For example I bought some from the LP and borrowed some from Silo as a test, and redeemed. So now we can officially count xUSD as unbanked even by this standard.




