How Does Tapioca Work?
A lending protocol that works across 15+ blockchains simultaneously, letting you borrow on one chain using collateral on another. It holds about $10M in deposits. Its D- grade comes from a catastrophic $4.5M hack by North Korean actors in October 2024, critical smart contract bugs, and the extreme complexity of operating across so many networks at once.
TVL
$10M
Sector
Lending
Risk Grade
D+
Value Grade
D-
Core Mechanisms
Lending/Omnichain
NovelFirst omnichain money market powered by LayerZero across 15+ EVM and non-EVM networks
Tapioca enables borrowing, lending, and leverage across multiple blockchains simultaneously via LayerZero messaging. Loan collateral and debt can exist on different chains.
Lending/Isolated-Markets
Singularity isolated-risk lending markets based on Sushiswap's Kashi design
Singularity markets provide isolated risk for each lending pair, preventing cascading liquidations across markets. Based on Kashi's proven architecture but extended for omnichain use.
Lending/BigBang
NovelBigBang markets for minting usd0 stablecoin against collateral
BigBang allows users to mint usd0 (decentralized overcollateralized omnichain stablecoin) against deposited collateral. Creates a CDP-like mechanism within the lending framework.
Stablecoin/Omnichain-CDP
Novelusd0 overcollateralized omnichain stablecoin mintable across chains
usd0 is a decentralized stablecoin that can be minted and redeemed on any supported chain via LayerZero OFT standard. Novel omnichain stablecoin design.
Vault/YieldBox
Yield Box (BentoBox V2) permissionless token vault for capital efficiency
Yield Box holds idle assets and routes them to yield strategies, improving capital efficiency. Based on Sushiswap's BentoBox V2 architecture.
Token/veToken
TAP token with vote-escrowed veTAP governance and LayerZero OFT standard
100M total TAP supply distributed over 6+ years with exponential decay. veTAP provides governance rights and fee revenue sharing. Uses LayerZero V2 OFT for cross-chain transferability.
Bridge/LayerZero-Messaging
LayerZero V2 for all cross-chain messaging and asset transfers
Entire protocol infrastructure depends on LayerZero for cross-chain communication. Single messaging layer dependency creates concentrated infrastructure risk.
How the Pieces Interact
Critical vulnerability discovered where addCollateral with share=0 bypasses allowedBorrow modifier, enabling infinite collateral share increase and unlimited USDO minting or Singularity borrowing. Exploitable for protocol insolvency.
All cross-chain operations depend on LayerZero. A LayerZero exploit, censorship, or downtime would simultaneously impact all 15+ networks, potentially stranding assets and debt positions across chains with no fallback.
usd0 can be minted against collateral on any chain. Cross-chain latency in price updates could allow users to mint stablecoins against collateral whose value has already dropped on another chain.
Yield Box routes idle assets to external yield strategies while simultaneously backing lending positions. If yield strategies suffer losses, available collateral for lending markets is silently reduced.
Cross-chain TAP transferability via OFT creates governance arbitrage opportunities where tokens can be rapidly moved between chains to influence governance votes in different jurisdictions.
What Could Go Wrong
- Devastating $4.5M exploit in October 2024 via social engineering attack attributed to North Korean actors — TAP token crashed 96%
- Critical smart contract vulnerabilities in BigBang and Singularity markets allowing infinite collateral share manipulation
- Omnichain architecture across 15+ networks via LayerZero creates massive cross-chain attack surface
Infinite Collateral Mint Insolvency
ElevatedTrigger: Attacker discovers remaining addCollateral(share=0) bypass vectors in BigBang or Singularity contracts, enabling unlimited USDO minting or borrowing across any of 15+ chains
- 1.Attacker exploits collateral share manipulation in BigBang or Singularity on one chain — Unlimited USDO minted or assets borrowed without proper collateral backing
- 2.Minted USDO bridged via LayerZero to other chains instantly — Bad debt spreads across multiple networks before detection
- 3.USDO supply inflated far beyond collateral backing — USDO depegs on secondary markets as true backing ratio revealed
- 4.Panic liquidations triggered across all Singularity markets — Cascading insolvency as collateral values prove insufficient
- 5.TAP token crashes as protocol insolvency becomes evident — Governance token loses remaining value; protocol becomes ungovernable
Risk Profile at a Glance
Overall: D+ (65/100)
Lower score = safer