CoinYQ
Heists & Mysteries3 min readChainlink (LINK)

The Extra Three Zeros That Almost Drained $1 Billion: The Synthetix Korean Won Oracle Glitch

On June 25, 2019, one of the most terrifying pricing bugs in decentralized finance history unfolded in a fraction of a second. An automated price oracle feed serving derivatives platform Synthetix accidentally published the exchange rate of the Korean Won (KRW) with three extra zeros—reporting 1 USD as 1,150,000 KRW instead of 1,150 KRW. In less than two blocks, an automated trading bot exploited the 1,000x mispricing to print over 37 million synthetic Ether () worth nearly $1 Billion, bringing the entire DeFi protocol to the brink of immediate catastrophic bankruptcy.

The Extra Three Zeros That Almost Drained $1 Billion: The Synthetix Korean Won Oracle Glitch

3-Minute Fast Briefing

  • The ParadoxOn June 25, 2019, an off-chain oracle feed misreported the USD/KRW exchange rate by 1,000x, setting 1 USD = 1,150,000 KRW instead of 1,150 KRW on Synthetix.
  • The Turning PointAn automated bot spotted the mispricing in under a second, buying synthetic KRW cheaply and converting it into 37 Million (worth nearly $1 Billion).
  • The LegacyFounder Kain Warwick reached out to the bot owner, negotiating a bounty reward in exchange for returning the synthetic tokens and saving the protocol.

Chronological Timeline

June 25, 2019 - 01:00 UTCThe 1,000x Oracle Feed Glitch

An automated price feed misplaces decimal points, broadcasting 1 USD = 1,150,000 KRW.

June 25, 2019 - 01:03 UTCThe Arbitrage Bot Strikes

A trading bot executes back-to-back trades, converting a tiny balance into 37M ($1B).

June 25, 2019 - 01:15 UTCEmergency Maintenance Circuit Breaker

Synthetix developers pause contract trading to prevent the bot from liquidating on Uniswap.

June 25, 2019 - 04:00 UTCKain Warwick's Bounty Negotiation

Synthetix contacts the bot operator on Discord and Reddit, offering a generous bug bounty.

June 26, 2019Full Recovery and Decentralized Oracle Shift

The bot owner returns all 37M ; Synthetix migrates permanently to Chainlink's multi-source oracles.

1. The 1,000x Decimal Mistake in the Dead of Night

In June 2019, Synthetix was pioneering synthetic asset trading on Ethereum, allowing users to trade synthetic gold, fiat currencies, and crypto without slippage [1].

To determine asset prices, Synthetix relied on an automated off-chain oracle feed that polled traditional foreign exchange markets. At approximately 01:00 UTC on June 25, 2019, one of the oracle APIs suffered a fatal decimal formatting error [1].

Instead of quoting the standard exchange rate of approximately 1 USD = 1,150 KRW (Korean Won), the API pushed a glitched feed reading 1 USD = 1,150,000 KRW—inflating the value of the Korean currency against the US Dollar by exactly one thousand times (1,000x) [1].

2. The Arbitrage Bot That Printed 37 Million sETH

Human traders were asleep, but automated algorithmic trading bots never sleep [2].

Within milliseconds of the bad price feed confirming on Ethereum, an bot detected the massive anomaly. The bot rapidly traded a modest balance of synthetic USD () into synthetic Korean Won (sKRW) at the normal rate, waited for the glitched oracle update, and traded the sKRW back into synthetic Ethereum () at a 1,000x markup [2].

In just two consecutive transactions, the bot minted 37,000,000 —an astronomical pile of tokens nominally worth nearly $1 Billion, utterly dwarfing the entire collateral backing of the protocol [2].

An oracle price miscalculation allowed an automated bot to generate 37 million . If these tokens had been dumped on external markets, the system would have collapsed.[2][3]
Synthetix Official Post-Mortem (June 2019)

3. The Race Against Time and the Emergency Circuit Breaker

Alarms blared across the Synthetix engineering team. If the bot operator managed to unwrap or sell even a fraction of the 37 million on Uniswap or Kyber Network, Synthetix's native SNX staking pool would be drained to zero, triggering instant bankruptcy [3].

Founder Kain Warwick immediately triggered the protocol's emergency admin pause function, freezing all synthetic asset transfers and halting the bot in its tracks [3].

Now came the delicate game-theory puzzle: how to convince an anonymous bot operator to surrender $1 Billion in theoretical profit? [4]

4. The Discord Peace Treaty and the Chainlink Revolution

Synthetix published a public plea across Twitter, Reddit, and Discord, reaching out to the wallet owner with an offer: Return the glitched , and we will pay you a massive white-hat bug bounty with zero legal repercussions [4].

Realizing that dumping 37 million would crash liquidity pools to zero and render the tokens worthless anyway, the bot operator agreed. Over a tense few hours on Discord, the tokens were returned safely, and the bounty was paid [4].

The near-death experience sparked a permanent revolution in DeFi security: Synthetix immediately forged a landmark partnership with Chainlink, pioneering decentralized, multi-node oracle networks with built-in deviation thresholds and circuit breakers [5].

A glitch with three extra zeros almost killed the derivatives industry in its infancy—but in doing so, it forged the hardened oracle infrastructure that protects hundreds of billions of dollars in Web3 today.

Key Takeaways for Investors & Builders

Security & Custody

The Peril of Single-Source Centralized Oracles

Relying on an un-aggregated or centralized price feed creates a catastrophic single point of failure that algorithmic bots can instantly exploit.

Engineering / Product

Decentralized Aggregation and Circuit Breakers

This incident catalyzed Chainlink's multi-node decentralized consensus and mandatory percentage deviation circuit breakers across all DeFi price feeds.

Key Insight

White-Hat Bounty Negotiation vs Protocol Collapse

When allow technically legal on-chain exploits, open communication and generous bug bounties remain vital lines of defense.

Connected Lore & Universe

Connected Stories in this Universe

Explore the chain reaction of historical breakthroughs, blunders, and legends.

Sources & References