The Black Thursday DAI Incident in March 2020

Definition

The Black Thursday DAI Incident refers to a critical event that occurred on March 12, 2020, within the MakerDAO protocol, a decentralized finance (DeFi) platform responsible for the creation of the stablecoin DAI. This incident unfolded amidst a broader global market downturn, often termed "Black Thursday," which saw significant price drops across traditional financial markets and cryptocurrencies, including Bitcoin. While the broader market crash was characterized by a frantic flight to cash, the MakerDAO incident was a specific technical failure within its liquidation mechanism, leading to substantial losses for some users and a single bot acquiring millions of dollars worth of Ethereum (ETH) for virtually no cost. It highlighted the vulnerabilities of nascent DeFi protocols under extreme market stress and network congestion.

Key Takeaway

The primary lesson from the Black Thursday DAI Incident is the profound impact that network congestion and oracle failures can have on the stability and security of decentralized finance protocols, particularly those relying on automated liquidation mechanisms. It underscored the necessity for robust, multi-faceted oracle solutions, resilient auction designs, and a deep understanding of potential systemic risks when designing and interacting with DeFi systems. The event demonstrated that even well-designed protocols can face unforeseen challenges when external conditions deviate drastically from their underlying assumptions.

Mechanics

MakerDAO operates on a system of Collateralized Debt Positions (CDPs), now commonly referred to as Vaults. Users deposit cryptocurrency collateral, predominantly Ethereum (ETH), into these Vaults to mint DAI, a stablecoin soft-pegged to the US dollar. To ensure the stability of DAI, each Vault must maintain a specific collateralization ratio, typically 150% or more. If the value of the deposited collateral falls below this ratio due to market price fluctuations, the Vault becomes undercollateralized and is subject to liquidation.

The liquidation process is designed to protect the protocol's solvency. When a Vault is liquidated, its collateral is put up for auction, allowing "keepers" (automated bots) to bid DAI to purchase the collateral. The DAI collected from these auctions is then used to repay the outstanding debt, plus a liquidation penalty, ensuring that the system remains solvent and DAI retains its peg. On Black Thursday, however, this crucial mechanism failed under unprecedented stress. The Ethereum network experienced severe congestion, leading to skyrocketing gas fees and significant transaction delays. This made it economically unfeasible or technically impossible for many keepers to participate in the liquidation auctions. Furthermore, the price feed oracles, which provide real-time market data to the protocol, were also delayed, exacerbating the problem by not updating prices quickly enough to trigger liquidations at appropriate levels. Consequently, when auctions did occur, there was a severe lack of competitive bids. A single bot was able to place bids of 0 DAI for liquidated ETH collateral, and due to the absence of other participants, these zero-bid auctions were successful. For approximately 40 minutes, this bot acquired ETH worth $8.32 million without paying anything, effectively exploiting a critical flaw in the system's assumptions about network conditions and keeper participation.

Trading Relevance

The Black Thursday DAI Incident offers several critical lessons for traders and participants in the cryptocurrency markets. Firstly, it highlighted the inherent volatility of crypto assets and the potential for rapid, cascading liquidations during extreme market downturns. Traders holding leveraged positions or those with undercollateralized loans on platforms like MakerDAO faced significant risks, as the rapid drop in ETH price combined with the liquidation mechanism's failure led to unexpected losses. Understanding the liquidation thresholds and the mechanics of such protocols is paramount for risk management.

Secondly, the incident underscored the importance of stablecoin stability and the underlying mechanisms that maintain their peg. While DAI eventually recovered its peg, the event caused temporary fluctuations and raised questions about its resilience. Traders relying on stablecoins for liquidity or as a safe haven during volatility must understand the specific risks associated with each stablecoin's design, including its collateralization model, oracle dependencies, and governance structure. Furthermore, the incident demonstrated how network congestion can directly impact trading strategies and the execution of on-chain operations. High gas fees can render arbitrage opportunities unprofitable or prevent timely adjustments to positions, emphasizing the need for traders to account for network conditions in their operational planning. The event also served as a stark reminder that even decentralized protocols are not immune to systemic risks, and a "flight to cash" can affect all asset classes, including those perceived as uncorrelated.

Risks

The Black Thursday DAI Incident exposed several fundamental risks inherent in decentralized finance protocols, particularly those involving collateralized lending and automated liquidations. One significant risk is smart contract risk, which encompasses not only potential coding bugs but also unforeseen interactions or vulnerabilities that emerge under extreme conditions. While the MakerDAO smart contracts themselves were not "broken" in the sense of a malicious hack, the assumptions about external factors like network health and keeper participation proved flawed, leading to an exploitable scenario.

Another critical risk is oracle risk. DeFi protocols rely on external data feeds, or oracles, to provide accurate and timely price information for collateral assets. During Black Thursday, delayed or stale oracle updates contributed to the problem by not reflecting the rapid price drop of ETH quickly enough, exacerbating the undercollateralization issue. This highlights the need for robust, decentralized, and resilient oracle networks that can withstand network congestion and provide reliable data even during periods of extreme volatility. Furthermore, network congestion risk was a primary catalyst. High gas prices on the Ethereum network effectively priced out many legitimate keepers, preventing them from participating in auctions and allowing the zero-bid scenario to unfold. This demonstrates that the underlying blockchain's performance and fee market dynamics can directly impact the security and functionality of applications built upon it. Finally, liquidity risk became apparent as the lack of competitive bids in the auctions led to the free acquisition of collateral. This emphasizes that even with a well-designed auction mechanism, a lack of active participants can undermine its effectiveness, especially during periods of market panic or technical disruption. These interconnected risks highlight the complex interplay of technical, economic, and human factors in DeFi security.

History and Examples

The broader "Black Thursday" on March 12, 2020, was a day of unprecedented market turmoil across global financial systems, triggered by growing fears surrounding the COVID-19 pandemic. Traditional markets, including stocks and even perceived safe-haven assets like gold, experienced sharp declines. Cryptocurrencies were not immune; Bitcoin's price plummeted by nearly 50% in a single day, marking one of its largest percentage losses since its inception. This widespread panic led to a massive flight to cash, where investors liquidated assets across the board to hold fiat currency.

Within this chaotic environment, the MakerDAO protocol faced its unique challenge. As the price of ETH, the primary collateral for DAI, crashed, numerous Vaults became undercollateralized and triggered liquidations. The critical failure occurred in the subsequent collateral auctions. Due to extreme congestion on the Ethereum network, gas prices surged, making it prohibitively expensive for most keepers (liquidation bots) to submit bids. This created a vacuum where a single, opportunistic bot was able to submit bids of 0 DAI for liquidated ETH. Because there were no competing bids, these zero-DAI bids were accepted, allowing the bot to acquire approximately $8.32 million worth of ETH for free over a 40-minute window. This incident prompted immediate and significant responses from the MakerDAO community. In the aftermath, MakerDAO implemented several key changes: they added USDC (USD Coin) as a new collateral type to diversify risk and provide more stable collateral options, adjusted auction parameters to be more resilient to network congestion, and initiated discussions around improving oracle decentralization and responsiveness. The event served as a stark, real-world stress test for DeFi, revealing critical areas for improvement in protocol design and operational resilience.

Common Misunderstandings

One common misunderstanding about the Black Thursday DAI Incident is that the MakerDAO protocol itself was "hacked" or fundamentally "broken." In reality, the protocol's rules were not inherently flawed, but rather a critical assumption about the external environment – specifically, the availability of competitive bids in liquidation auctions and the smooth functioning of the Ethereum network – failed under extreme stress. The system was designed to be robust, but it could not account for a scenario where network congestion effectively paralyzed the majority of its automated participants.

Another misconception is that DAI permanently lost its peg to the US dollar. While DAI did experience temporary volatility and traded above its peg for a short period due to the market's demand for stablecoins and the liquidation issues, it ultimately recovered its stability. The protocol's underlying mechanisms, despite the auction failures, continued to function, and the community quickly implemented measures to restore confidence and stability. Furthermore, some might mistakenly attribute the entire market crash to the MakerDAO incident. It is important to differentiate: Black Thursday was a global market event, and the MakerDAO incident was a specific, albeit severe, consequence within a particular DeFi protocol, exacerbated by the broader market conditions. The incident was not the cause of the crypto market crash but rather a symptom of the extreme stress placed on nascent decentralized systems during that period. Finally, there's a misunderstanding that the incident was a deliberate, malicious attack by a sophisticated actor. While the bot's actions were opportunistic and exploited a vulnerability, it was not a traditional "hack" in the sense of breaking into the system or stealing funds through a code exploit. Instead, it leveraged the protocol's intended auction mechanism under conditions where competition was absent.

Summary

The Black Thursday DAI Incident in March 2020 stands as a pivotal moment in the history of decentralized finance, offering invaluable lessons on protocol design, risk management, and the resilience of blockchain infrastructure. It demonstrated how a confluence of factors – a global market crash, severe network congestion on Ethereum, and a lack of keeper participation in liquidation auctions – could lead to an unintended exploitation within a sophisticated DeFi protocol like MakerDAO. A single bot acquired millions in ETH for free by placing zero-DAI bids, exposing vulnerabilities related to oracle reliability, smart contract assumptions, and the critical dependence on a functioning underlying blockchain network. The event prompted significant improvements within MakerDAO, including the diversification of collateral types and enhancements to its auction mechanisms, ultimately strengthening the protocol's resilience. For the broader DeFi ecosystem, Black Thursday served as a powerful stress test, highlighting the ongoing need for robust security measures, decentralized infrastructure, and a thorough understanding of systemic risks to ensure the long-term stability and trustworthiness of decentralized financial applications.