How Does Penpie Work?

Pendle yield booster: stake PNP tokens to boost Pendle LP yields by up to 2.5x through vote-locking mechanism

Penpie allows users to stake Pendle LP tokens and earn boosted yields by leveraging pooled vlPENDLE voting power. Users deposit into Penpie, which aggregates voting power to maximize yield across Pendle markets. Standard vote-escrowed boost aggregation model.

vlPNP (vote-locked PNP): time-locked governance token with voting power proportional to lock duration (up to 2 years)

PNP holders can lock tokens for up to 2 years to receive vlPNP, granting governance voting rights and protocol fee share. Follows Curve's veToken model (veCRV). Longer locks = more voting power and fee capture.

Auto-compounding Pendle rewards: automatically harvests PENDLE emissions and restakes them to compound yields

Penpie automatically collects PENDLE token rewards from staked positions and reinvests them, saving users gas fees and optimizing compounding frequency. Standard yield aggregator auto-compounding pattern.

Batch reward harvesting: aggregates reward claims across multiple Pendle markets in single transaction

The _harvestBatchMarketRewards function was the exploit vector in September 2024. Batching reduces gas costs but increases complexity and attack surface. This function lacked proper reentrancy guards.

Pendle ecosystem composability layer: enables leveraged yield strategies by combining Penpie boosts with external lending protocols

Users can deposit Penpie receipt tokens into lending protocols (Gearbox, Morpho) to borrow against boosted yield positions, creating leveraged Pendle exposure. This composability is novel but amplifies contagion risk across DeFi.

Dual token incentives: emits both PNP governance tokens and boosted PENDLE rewards to stakers

Penpie's dual incentive model provides both its native PNP token and amplified PENDLE yields. This creates complex tokenomics where PNP value depends on both governance utility and yield-boosting effectiveness. Novel incentive alignment but untested in stress scenarios.

The _harvestBatchMarketRewards function allowed external calls before state updates, enabling attackers to create fake Pendle markets and drain funds through reentrancy. Batching optimization created the critical vulnerability that cost $27M in September 2024.

100% of Penpie TVL depends on Pendle's security and solvency. Any Pendle exploit, PT/YT depeg event, or Pendle protocol failure instantly cascades to all Penpie users. No diversification or fallback mechanism exists.

After the September 2024 hack, governance faces dilemma: mint PNP to compensate victims (diluting existing holders) or let victims bear losses (destroying protocol reputation). Either choice creates death spiral dynamics similar to Rari Capital and Indexed Finance failures.

Protocols accepting Penpie receipt tokens as collateral (Gearbox, Morpho) face bad debt if Penpie or Pendle suffers an exploit. Leveraged positions amplify losses: a 20% depeg triggers liquidations that push Penpie tokens further down, creating liquidation spirals.

Auto-compounding requires continuous contract execution permissions. If Penpie deploys a malicious upgrade or admin keys are compromised, the auto-compound mechanism can be weaponized to drain all staked assets instantly (similar to Harvest Finance 2020 exploit pattern).