Re7 Labs demands apology after DeFi whistleblower claims vault risks

Re7 Labs Issues Cease and Desist to Whistleblower Amid DeFi Collapse Accusations and Market Risks

  • Re7 Labs has issued a cease and desist letter via its legal counsel to a whistleblower over risk management accusations.
  • The whistleblower claims depositors suffered losses linked to the November Stream Finance collapse and related DeFi vault failures.
  • Allegations include poor asset selection, inadequate monitoring of borrowing risks, and failure to act during market stress.
  • Re7 Labs denies wrongdoing and attributes responsibility to Stream Finance and Stables Labs.
  • The 2024 collapse exposed vulnerabilities in DeFi yield vaults dependent on risky leverage and unstable collateral tokens.

Re7 Labs, a DeFi risk management firm, has sent a cease and desist letter to a whistleblower citing false accusations related to the November 2025 collapse of Stream Finance and subsequent domino effects across DeFi lending vaults. The letter was issued through the law firm Pillsbury Winthrop Shaw Pittman LLP.

- Advertisement -

The whistleblower, acting on behalf of depositors who lost funds, accused Re7 Labs of failing to properly manage risk in Tether (USDT) lending markets on Euler Finance. The claim centers around inadequate controls before, during, and after the $93 million Stream Finance collapse announced on November 4.

Specific allegations include poor asset selection and loan-to-value (LTV) settings, failure to monitor large or abnormal borrowings, insufficient restrictions on borrowing amid suspicious activity, delays or neglect in executing liquidations or adjusting terms as collateral value fell, and poor communication with users and partners. These points came in a tip sent to Protos Leaks from depositors impacted by the event.

The whistleblower’s statement references an earlier report advocating for the suspension of the fund’s nomination for the HFM European Performance Awards, which ultimately was unsuccessful. The report described an attacker borrowing large amounts of USD1 and USDT against USDX, then deliberately crashing the USDX price through sales linked to Stables Labs addresses. This caused on-chain liquidity shortages and failed collateral liquidations.

Blame was also aimed at Euler Finance for allegedly lacking safeguards and at Binance for reportedly not freezing proceeds despite victim requests.

- Advertisement -

In response, a Re7 Labs spokesperson described the accusations as “serious, inaccurate and unsubstantiated, and distract from the ongoing legal process and genuine recovery efforts.” The firm maintains responsibility lies with Stream Finance and/or Stables Labs and claims it too suffered financial losses as a lender. The cease and desist letter strongly denies any wrongdoing or breach of obligations and demands a formal apology, corrective statements, confirmation of identity, and deletion of related messages.

Protos requested specific answers regarding the whistleblower’s claims about collateral choices and monitoring of abnormal borrowing but has not yet received a reply.

The collapse exposed a wider problem in the DeFi yield vault ecosystem, where interconnected lending and borrowing led to cascading failures starting in late October. As confidence faded in vault tokens like Stream’s xUSD, Elixir’s deUSD, and Stables Labs’ USDX—all used widely as collateral for stablecoin loans—these tokens lost their pegs and borrowers’ incentives to repay vanished.

This event revealed that generating high yields on stablecoin deposits often requires risky leverage. Public statements from Re7 Labs indicate exposure of at least $27 million to now devalued tokens deUSD and USDX.

For more details, see the original Protos report. Additional coverage includes High yields to haircuts: Has DeFi learned anything from yield vault collapse? and Stream Finance meltdown: winners and losers in DeFi ‘risk curator’ reckoning.

Readers can securely submit tips via Protos Leaks and follow Protos on X, Bluesky, and Google News. Video content is available on the Protos YouTube channel.

✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

Previous Articles:

- Advertisement -

Latest News

Chrome zero-days exploited, Google patches actively

Google urgently released patches for two high-severity Chrome vulnerabilities already being actively exploited in...

US Debt Hits $578B Quarter, BRICS Sell-Off Sparks Alarm

The U.S. Department of the Treasury projects borrowing $578 billion in Q1 2026, a...

Crypto trader loses $50M in swap, gets only 324 tokens

A crypto trader executing a $50 million swap for AAVE tokens on Cow Swap...

Struggling Bitcoin Miners May Pivot to AI: Wintermute

Diminishing returns from Bitcoin mining are forcing miners to explore new revenue avenues, such...

Global Botnet SocksEscort Dismantled by FBI, Europol

An international law enforcement operation called Operation Lightning has dismantled the SocksEscort proxy service,...

Must Read

How To Buy a Handshake Domain: A Step-by-Step Guide

Handshake Domains | Benefits | Drawbacks | How To Buy | Supported BrowsersIn this step-by-step guide, I am going to show you how to...