What Happened

Iron Finance (Backtest)

$2B|Depeg / Death Spiral|June 16, 2021

Large TITAN sell-off triggered IRON redemptions, which minted more TITAN, crashing its price further. The partial-collateral design meant IRON could not maintain peg once TITAN value collapsed to near-zero — a classic algorithmic stablecoin death spiral. TITAN supply hyperinflated from 1 billion to approximately 35 trillion tokens. The TWAP oracle lag accelerated the spiral by mispricing TITAN during rapid decline.

What Hindenrank Would Have Said

As of May 15, 2021

C-
Risk Score
53/100

“High risk — reflexive death spiral mechanism between IRON stablecoin and TITAN seigniorage token creates structural bank run vulnerability with no circuit breaker, compounded by TWAP oracle lag risk and anonymous team.”

Mechanism Novelty9/15
Interaction Severity18/20
Oracle Surface7/10
Documentation Quality7/10
Track Record6/15
Scale Exposure0/10
Regulatory Risk4/10
Protocol Vitality2/10

Grade Predicted This Failure

Flagged by dimensions: Mechanism Novelty, Interaction Severity, Oracle Surface, Documentation Quality, Track Record, Scale Exposure

One or more collapse scenarios directly matched the actual failure mode.

Top Risks Identified

  1. 1.IRON's partial-collateral design creates a reflexive death spiral risk: IRON redemptions mint new TITAN, which increases TITAN supply and depresses its price, which in turn makes IRON less collateralized, triggering more redemptions. This feedback loop has no circuit breaker and is structurally identical to classic bank run dynamics.
  2. 2.The TWAP oracle used for TITAN pricing within the mint/redeem mechanism can report stale prices during rapid TITAN price declines. If TITAN's price drops faster than the TWAP window updates, the protocol misprices redemptions, accelerating the spiral by giving redeemers more TITAN (at stale, higher prices) than the market value warrants.
  3. 3.With only 75% USDC collateralization, a sustained loss of confidence in TITAN's value leaves IRON structurally undercollateralized. The 25% algorithmic backing via TITAN has no fundamental floor — if TITAN approaches zero, IRON holders cannot be made whole even through full redemption.
  4. 4.Anonymous development team with no public identities, limited formal documentation, and a prior incident on BSC where the ValueDefi integration was exploited (May 8, 2021). The Polygon deployment launched May 18, 2021 and has been live for less than one month with no independent audit of the Polygon-specific contracts confirmed.

Collapse Scenarios

TITAN Seigniorage Death Spiral

Elevated
Trigger

A large TITAN holder (whale) sells >$10M of TITAN on thin AMM pools, causing >20% price drop within one hour. The TWAP oracle lags by the full window duration, causing IRON redemptions to mint TITAN at stale (higher) prices.

Cascade
1.
Large TITAN sell-off on SushiSwap/QuickSwap pools drops TITAN price by 20-30% within an hour→IRON's algorithmic backing (25% TITAN) is worth less than the protocol assumes, creating a gap between IRON's stated $1 peg and its actual collateral coverage
2.
Arbitrageurs and panicked IRON holders begin redeeming IRON for USDC + TITAN at the ECR ratio→Each redemption burns IRON but mints new TITAN tokens at the TWAP price (which is higher than spot), flooding the market with TITAN and further depressing its price
3.
TWAP oracle continues reporting stale TITAN prices 20-50% above spot, causing each redemption to mint fewer TITAN tokens than the spot value would require→Redeemers receive TITAN valued above market, but the market absorbs the new supply at spot, accelerating the price decline. The TWAP lag creates a positive feedback loop.
4.
TITAN price drops below the level where the 25% algorithmic backing can support IRON at $1, even assuming full ECR USDC payout→IRON depegs below $1 as rational holders rush to redeem before the USDC reserve is exhausted. The dynamic collateral ratio adjustment mechanism cannot re-collateralize fast enough.
5.
Mercenary LP capital exits TITAN/MATIC and IRON/USDC pools as farming yields become worthless with TITAN approaching zero→AMM liquidity collapses, making TITAN effectively untradeable. IRON stabilizes at roughly its USDC collateral ratio (70-75 cents) until USDC reserves are drained through redemptions.
6.
TITAN supply hyperinflates from continuous redemptions (supply increases from 1B toward trillions) while its price approaches zero→The protocol becomes functionally insolvent — IRON holders who have not redeemed face total loss on the algorithmic portion and partial loss as USDC reserves deplete.
Historical Precedent

This scenario mirrors the classic algorithmic stablecoin death spiral seen with Basis Cash (December 2020), which also used a seigniorage token model. Empty Set Dollar (ESD) experienced similar reflexive selling in late 2020. The partial-collateral design adds a false sense of security — the 75% USDC backing delays the spiral but does not prevent it, as the algorithmic portion still creates the same reflexive dynamics.

De-collateralization Trap During Euphoria Reversal

Moderate
Trigger

After a period of IRON trading above $1 (driving TCR down to 70% or lower), a broad crypto market correction of >15% in 24 hours reverses sentiment, triggering simultaneous TITAN sells and IRON redemptions.

Cascade
1.
During a bull market, IRON consistently trades above $1, causing the TCR to decrease from 75% toward 70% (de-collateralization phase)→The protocol reduces USDC backing to improve capital efficiency, increasing the proportion of IRON's value backed by TITAN from 25% to 30%
2.
A broad crypto market correction (BTC drops 15%+) hits Polygon ecosystem tokens including TITAN, which drops 25%+ due to higher beta→IRON's algorithmic backing is now worth significantly less at exactly the moment when the collateral ratio is at its lowest. The protocol is maximally vulnerable.
3.
IRON trades below $1, triggering the re-collateralization mechanism to increase TCR, but the adjustment rate is too slow to match the pace of redemptions→Rational holders front-run the re-collateralization by redeeming IRON immediately, receiving USDC at the current (low) ECR before the system can adjust
4.
Redemption-minted TITAN floods the market during an already-declining crypto market, with no buying demand→TITAN enters a death spiral: each redemption creates more supply, lower price, less backing for IRON, more redemptions. The de-collateralization during euphoria means there is less USDC buffer to absorb the shock.
5.
The anonymous team attempts to intervene but has no timelock governance, no emergency collateral injection mechanism, and no way to halt the reflexive loop without pausing the entire protocol→Protocol either pauses (freezing user funds) or continues operating until TITAN hyperinflates to zero and IRON depegs permanently
Historical Precedent

The de-collateralization trap mirrors the procyclical leverage buildup seen in traditional finance before the 2008 financial crisis — reducing buffers during good times and being caught undercapitalized when conditions reverse. In DeFi, Basis Cash's BAC stablecoin showed similar behavior where seigniorage tokens (BAS) collapsed during market-wide sell-offs in Q1 2021.

Oracle Manipulation via AMM Liquidity Drain

Moderate
Trigger

TITAN/MATIC AMM pool liquidity drops below $5M as mercenary capital rotates to higher-yield farms, making the TWAP oracle susceptible to manipulation by a well-capitalized attacker ($500K+ capital).

Cascade
1.
Mercenary LPs withdraw from TITAN pools as farming APY normalizes, reducing TITAN/MATIC pool liquidity from $50M+ to under $5M→The TWAP oracle's price source (AMM pools) becomes thin enough for manipulation. The cost to move TITAN's price 20% drops from millions to hundreds of thousands of dollars.
2.
An attacker executes a series of large sells across multiple blocks to manipulate the TWAP downward, then mints IRON at the depressed TITAN valuation→The attacker mints IRON using cheap TITAN (valued by the manipulated TWAP) while receiving full $1 of IRON, effectively creating IRON with less than $1 of total collateral input
3.
The attacker immediately redeems the minted IRON for USDC at the ECR ratio, extracting more USDC than the collateral they provided→Protocol USDC reserves are drained by the profit extracted, leaving less collateral to back remaining IRON supply. This can be repeated across multiple blocks.
4.
The USDC reserve depletion triggers a confidence crisis as on-chain observers notice the declining collateral→Organic IRON holders begin redeeming, initiating the reflexive death spiral described in CS-1, but from a position of already-depleted USDC reserves
Historical Precedent

TWAP oracle manipulation attacks have been demonstrated on multiple DeFi protocols. The Harvest Finance attack (October 2020, $34M) used flash loans to manipulate Curve pool prices. While Iron Finance's TWAP window provides some protection against single-block flash loans, multi-block manipulation is still feasible when pool liquidity is thin.

See how today's protocols score

The same 8-dimension rubric applied to 672+ live protocols.

View LeaderboardAll Backtests