Liquidation Shield Research

The $1.1M Trap: how toxic-collateral markets farm liquidation bots

On-chain forensics · 15 Jul 2026 · ~6 min

We pulled 32,000 on-chain liquidations to answer a boring question — how much warning do borrowers get before they're liquidated. We found something else on the way: a slice of those liquidations aren't accidents at all. They're bait, and automated bots are bleeding over a million dollars every two months walking into it.

The anomaly: bots paying more than they get

In a healthy liquidation, the liquidator repays a borrower's debt and seizes collateral worth a little more — that spread is the liquidation bonus, their profit. So a liquidation where the seized collateral is worth less than the debt repaid should basically never happen. A competent bot simulates the exit first and walks away.

Yet 585 of the liquidations we indexed were negative-win — the liquidator repaid more than it could recover. Filter out the small change and the losses concentrate hard: 36 liquidations account for $1.87M of red ink. Someone's bots are losing real money, on purpose-built terms.

Not bad luck — a design

The tell is in the structure. Sort the losses by collateral and a signature jumps out:

collateral bots markets borrowers bot losses AVLT ~5 1 7 $220k RLP 7 1 5 $824k BAL 15 1 3 $271k (187 liquidations) REKT 3 1 2 $29k apyUSD 6 1 11 $22k — WETH 22 3 53 $657k ← the control group

Every trap is the same shape: a single market, a handful of borrowers, one illiquid or no-name token. Compare WETH — spread across 22 bots, 53 borrowers, 3 markets. That's organic noise (partial fills, stale accounting). The others are engineered. One is even called REKT.

Anatomy of one trap

Take the AVLT market. On-chain it's a permissionless Morpho Blue market anyone can deploy:

collateral: AVLT (a token with no name or symbol set) oracle: a custom 2,598-byte contract → prices AVLT at ~$1.09 LLTV: 86% (borrow up to 86% of "value") loan: USDC

A no-name token, a bespoke price oracle putting it above a dollar, and an aggressive loan-to-value — on a market nobody vetted. A borrower deposits the token, borrows real USDC against the oracle's number, and lets the position go underwater. A naive bot sees "oracle says profitable," liquidates, repays the USDC — and is left holding a token it can't sell. One such bot, still active this month, has done this 30 times for a $220k loss.

The whole thing in one line

The liquidator's loss equals the oracle's lie. The bot loses exactly the gap between what the oracle claims the collateral is worth and what it's really worth. No inflated oracle, no gap, no bag. The "free money" and the manipulation are the same object.

That's also why this is not a clever-but-legal edge — it's the oracle-manipulation playbook that's already been prosecuted (see: Mango Markets). We're documenting it so you can spot and avoid it, not run it.

What to do about it

Don't get caught out by liquidation

Liquidation Shield watches your Aave & Morpho positions and warns you before your Health Factor hits 1.0 — read-only, on Telegram, free to start.

Open @LiqShieldBot