Worked example · 2025-07

Lido stETH / Aave validator-exit-queue and looped-leverage depeg cascade — Ethereum L1 — 2025-07

Loss: approximately several hundred million dollars in cumulative looped-leverage deleveraging, forced-position-unwind, and realised liquidation costs across the stETH-collateralised lending cohort during the 2025-07-16 to 2025-07-27 cascade. Headline numerical anchors per the multi-source forensic record: ~$1.7B in ETH withdrawn from Aave's wETH lending pool over the cascade window, with at least ~$600M attributed to addresses linked to Justin Sun / HTX-affiliated wallets [defiantethexitqueue2025] [blocksstethaavedepeg2025]; Aave's wETH borrow APR spiked from a baseline ~3% to peaks above 18% as utilisation rose [migalabsexitqueue2025]; Ethereum's validator-exit queue reached 743k ETH (~$2.7B at prevailing prices) — its highest level since January 2024 — and Lido's unfinalised withdrawal queue alone exceeded 235k stETH at peak [migalabsexitqueue2025]; stETH/ETH depegged by approximately 0.3–0.6% (a small absolute move but sufficient to flip the dominant looped-leverage strategy from positive to negative carry) and remained at persistent discount through the cascade window [blocksstethaavedepeg2025]. Lido's market share of staked ETH fell to ~25% — a three-year low — as the cohort-level deleveraging unwound staked-ETH positions across the protocol [cryptoslatelidomarketshare2025]. The cascade was not an insolvency event — every stETH remained 1:1 backed and the protocol-level redemption path (Shapella post-Merge) remained operational — but the withdrawal-queue depth saturated under the cascade volume, recreating the 2022-style forced-secondary-market-exit dynamic in a post-Shapella context. Total realised loss across the looped-leverage and deleveraging cohort plausibly exceeds $200–300M (cumulative across liquidation discounts, slippage on forced-stETH sales, and negative-carry interest costs); precise aggregation is not available in public reporting at v0.1 freeze, but the mechanism-design framing is the load-bearing OAK contribution.
Recovery: arbitrage-and-time, plus protocol-level confidence return — no operator-make-whole; no regulator action; the cohort absorbed realised losses through the cascade and stETH's peg gradually restored as the validator-exit-queue cleared and as Aave borrow rates normalised through August 2025. The structural recovery primitive that mattered was time-to-clear-the-queue rather than any per-incident operator action: as queued validators completed exit and ETH returned to the secondary market, the deleveraging cycle wound down. Lido did not compensate liquidated borrowers; Aave did not adjust its oracle methodology retroactively; the cascade's recovery posture mirrors the 2022 cascade and the Renzo April 2024 cascade — realised losses accrue to the looped-leverage cohort, with structural mitigation depending on protocol-level primitives (validator-exit-queue parameter design, oracle methodology coordination) rather than per-incident response.
OAK Techniques observed: OAK-T14.003.001(iii) (LST/LRT Depeg-Cascade — Withdrawal-Queue-Depth Saturation — primary; post-Shapella, the Beacon Chain validator-exit-queue throughput was the binding constraint, with the queue reaching 743k ETH at peak and recreating the forced-secondary-market-exit dynamic) + OAK-T14.003 (Restaking Cascading Risk) — sub-case (b) Liquid-staking-token depeg cascade, in its post-Shapella formulation where the constrained primitive is withdrawal-queue depth rather than withdrawal-path absence. The proximate trigger was a single-actor liquidity withdrawal cascade (Justin Sun / HTX-affiliated wallets pulling ~$1.7B from Aave's wETH pool); the propagation channel — Aave borrow-rate spike → looped-leverage strategy carry-flip → forced-deleveraging → stETH redemption demand → validator-exit-queue saturation → secondary-market-exit forced for the marginal seller → stETH depeg → liquidation oracle propagation — is structurally identical to the 2022 stETH cascade and the 2024 Renzo ezETH cascade, but operates through a different constrained primitive (queue depth vs. pool depth vs. redemption-path absence). OAK-T17.002 (Liquidation-Cascade Engineering) — structurally adjacent; the Aave borrow-rate spike triggered a cascade of predatory liquidations across the looped-leverage cohort, with liquidation bots harvesting at distressed prices as positions unwound. OAK-T14.001 is not a contributor — no slashing event fired; the validator-exit-queue saturated through legitimate-withdrawal demand, not through correlated misbehaviour. OAK-T9.001 (oracle / pricing-feed dependency) is a contributing failure mode in the same way as the 2022 / 2024 cases: lending-market oracles propagated the secondary-market discount into liquidation triggers without a redemption-rate / queue-depth-aware buffer. The case does not classify under T9.005 (no rounding-error / arithmetic bug), under T10 (no bridge involvement), or under T11 (no key compromise).
Attribution: pseudonymous / non-adversarial — no external attacker; no DOJ / regulator action; no named-individual indictment or claim. The proximate trigger was Justin-Sun-linked / HTX-affiliated wallet activity that was itself legitimate market behaviour (an entity rotating large balances), but its scale exceeded the system's queue-depth and pool-depth capacity. Attribution at the trigger layer is inferred-strong for Justin Sun / HTX-affiliated wallets per multi-source on-chain analysis (BeInCrypto, The Block, The Defiant) [beincryptostethdepeg2025] [blocksstethaavedepeg2025] [defiantethexitqueue2025], but no claim of adversarial intent has been made in public reporting; the cascade is treated by analysts as a market-structure event driven by single-actor concentration risk, not an attack. The case is included because the loss was real across a documented institutional and retail cohort, the cascade structure is the canonical post-Shapella T14.003 (b) shape, and OAK's framework treats mechanism-design-driven cohort harm as a first-class T14 surface.
Key teaching point: a liquid-staking-token in the post-Shapella era can still cascade when withdrawal-queue depth saturates under stress, and the cascade structure is functionally identical to the pre-Shapella 2022 cascade. The July 2025 Lido / Aave case is the empirical anchor that the LST/LRT depeg-cascade surface remains operational even when native-redemption paths are enabled — the constrained primitive shifts from "redemption-path absent" (2022) to "operator-blocked redemption" (2024 Renzo) to "queue-depth saturated" (2025 Lido), but the cascade structure is unchanged. The structural OAK lesson is that withdrawal-queue depth is itself a first-class T14.003 (b) detection signal — and the cascade can fire on any combination of (queue-depth-saturating exit demand) + (looped-leverage downstream) + (DEX-spot-anchored lending oracle methodology). The mitigation primitives — (1) chain-level validator-exit-queue parameter design with surge-capacity buffer; (2) lending-market oracle methodology that incorporates queue-depth-aware redemption rate, not pure DEX spot; (3) lending-market LTV ceilings calibrated for queue-saturation tail risk; (4) borrower-side awareness that queue depth is a parameter that can saturate, not a structural guarantee — are deployable now and are the natural extension of the 2022 / 2024 mitigation framings to the post-Shapella context. Contributors writing future T14.003 (b) entries should treat queue-depth-saturation as a recurring constrained primitive, not a one-time surprise.

Summary

By 2025, Ethereum's staking ecosystem had matured significantly relative to 2022. The Shapella upgrade in April 2023 had enabled validator withdrawals at the Beacon Chain layer; Lido had exposed a native-redemption path through stETH for over two years; LRTs had launched with their own redemption mechanisms (after the Renzo April 2024 cascade pushed the issuer cohort to ship native withdrawals); and looped-leverage strategies on stETH (deposit stETH on Aave, borrow ETH, swap for additional stETH, re-deposit) had returned to scale as a dominant DeFi-yield primitive. Aave's stETH integration handled multi-billion-dollar collateral with substantial wETH-borrow demand from looped-leverage borrowers and from broader DeFi leverage strategies.

Two structural parameters bounded the system's response capacity. First, Aave's wETH lending pool utilisation rate determined the marginal-borrower's borrow APR: as utilisation rose, rates rose non-linearly via Aave's interest-rate model, with sharp slope above ~80% utilisation. Second, Ethereum's validator-exit queue processed validator withdrawals at a chain-protocol-determined rate (with churn-limit parameters that bound the per-epoch exit volume); under stress the queue could saturate, with new exit requests waiting days or weeks to clear. Lido's withdrawal path inherits this constraint: stETH redemption to ETH passes through the validator-exit queue.

In mid-July 2025, addresses publicly linked to Justin Sun / HTX-affiliated entities initiated a cascade of large-scale withdrawals from Aave's wETH lending pool. Per The Defiant, BeInCrypto, and The Block reporting [defiantethexitqueue2025] [beincryptostethdepeg2025] [blocksstethaavedepeg2025], cumulative withdrawals from Aave reached approximately $1.7B over the cascade window, with at least ~$600M attributed to Justin-Sun-linked addresses and additional outflows from Abraxas Capital and Ether.fi-related entities. The withdrawal volume drove Aave's wETH-pool utilisation rate sharply higher, pushing the wETH borrow APR from a baseline ~3% to peaks above 18% within days [migalabsexitqueue2025].

The borrow-rate spike flipped the dominant stETH/ETH looped-leverage strategy from positive to negative carry: borrowers paying ~18% to short ETH against stETH-collateralised loans, while earning Lido's ~3% native staking yield, faced a deeply negative net carry. The cohort began deleveraging — repaying ETH borrows, redeeming stETH for ETH (or selling stETH on Curve / Uniswap), and unwinding the loop.

Two propagation channels operated in parallel. First, stETH redemption demand flowed into Lido's native-withdrawal queue, which fed into the Beacon Chain validator-exit queue. Per MigaLabs and The Block analysis [migalabsexitqueue2025] [blocksexitqueuerecord2025], the validator-exit queue reached 743k ETH — its highest level since January 2024 — and Lido's unfinalised withdrawal queue alone exceeded 235k stETH at peak. The queue's churn-limit-bounded throughput meant new withdrawal requests faced multi-day-to-multi-week wait times. Second, secondary-market sell pressure from borrowers unwilling to wait for the queue flowed into Curve / Uniswap stETH/ETH pools, depressing the secondary-market peg. stETH/ETH traded at approximately 0.3–0.6% discount through the cascade window [blocksstethaavedepeg2025].

The depeg amplitude was small in absolute terms (substantially smaller than 2022's ~7% trough or 2024's ~79% intra-hour Renzo trough), but it was sufficient to flip leveraged-position economics at the cohort level. As more borrowers deleveraged, the queue saturated further, the secondary-market discount widened, and the borrow-rate spike persisted — a self-reinforcing reflexive loop. Lido's market share of staked ETH fell to approximately 25% — a three-year low — as protocol-wide deleveraging unwound stake [cryptoslatelidomarketshare2025].

The cascade cleared through August 2025 as queued validator exits completed, ETH returned to the secondary market, Aave's wETH-pool utilisation normalised, and borrow rates returned to baseline. No operator-make-whole; no regulator action; no per-incident operator response. The structural recovery primitive was time-to-clear-the-queue plus secondary-market arbitrage, mirroring the 2022 cascade's recovery posture.

For OAK's purposes the case is the post-Shapella anchor for T14.003 sub-case (b) and demonstrates that the cascade-amplification surface remains operational even when native-redemption paths are enabled. The novel OAK contribution is documenting the withdrawal-queue-depth saturation as a distinct constrained-primitive sub-class within T14.003 (b), structurally analogous to but operationally distinct from the 2022 (chain-level redemption absence) and 2024 (operator-design redemption blocking) sub-classes.

Timeline (UTC)

When	Event	OAK ref
2023-04	Ethereum Shapella upgrade enables validator withdrawals; Lido withdrawal path activated; pre-Shapella T14.003 (b) cascade surface structurally retired for stETH	(T14.003 (b) chain-level mitigation deployed)
2023-04 to 2025-Q2	Looped-leverage strategies on stETH return to scale on Aave; LRT issuers ship native-redemption paths through 2024–2025 in response to Renzo April 2024 cascade `[steakhouselrt2024]` `[gauntletrestaking2024]`	(T14.003 (b) surface re-accumulates through queue-depth primitive)
2025-07-16 onward	Justin-Sun-linked / HTX-affiliated wallets initiate large-scale withdrawals from Aave wETH lending pool; cumulative withdrawals reach ~$1.7B over cascade window per multi-source on-chain analysis `[defiantethexitqueue2025]` `[blocksstethaavedepeg2025]`	(proximate trigger / single-actor concentration shock)
2025-07-16 to 2025-07-22	Aave wETH borrow APR spike: utilisation rises to high levels; borrow APR spikes from ~3% baseline to peaks above 18% `[migalabsexitqueue2025]`	(T14.003 (b) borrow-rate channel fires)
2025-07-16 to 2025-07-27	Looped-leverage carry-flip and deleveraging cycle: stETH/ETH looped-leverage cohort enters deleveraging, redeeming stETH for ETH or selling on Curve / Uniswap	T14.003 (b) cascade fires
2025-07-16 to 2025-07-27	Validator-exit queue saturates: queue reaches 743k ETH (highest since January 2024); Lido unfinalised withdrawal queue exceeds 235k stETH at peak `[migalabsexitqueue2025]` `[blocksexitqueuerecord2025]`	T14.003 (b) queue-depth saturation
2025-07-16 to 2025-07-27	stETH secondary-market depeg: stETH/ETH trades at ~0.3–0.6% discount on Curve / Uniswap; lending-market oracle methodology propagates discount into liquidation triggers `[blocksstethaavedepeg2025]`	T14.003 (b) secondary-market channel
2025-07-22 to 2025-07-27	Lido staked-ETH market share falls to ~25% — three-year low — as protocol-wide deleveraging unwinds stake `[cryptoslatelidomarketshare2025]`	(cohort-level realised harm)
2025-07 to 2025-08	Detection chain: MigaLabs `[migalabsexitqueue2025]`, The Block `[blocksstethaavedepeg2025]`, The Defiant `[defiantethexitqueue2025]`, BeInCrypto `[beincryptostethdepeg2025]`, CryptoSlate `[cryptoslatelidomarketshare2025]`, Blockworks `[blockworksstethloops2025]`, AInvest `[ainveststethdepeg2025]` publish converging analyses	(multi-investigator coverage)
2025-08 onward	Validator-exit queue clears; ETH returns to secondary market; Aave wETH borrow rates normalise; stETH peg restored; cascade winds down	(market-clearing recovery)
2025-08 to v0.1	No operator-make-whole; no regulator action; no protocol-level parameter change in immediate response (queue-depth churn-limit parameters remain at pre-cascade settings); structural mitigation depends on chain-level governance / protocol-design proposals through 2026	(recovery posture: time + arbitrage; structural fix pending)
Continuing	T14.003 (b) cascade pattern remains operational on any LST/LRT with looped-leverage downstream + queue-depth-bounded redemption — the July 2025 case is the canonical post-Shapella empirical anchor	(T14.003 (b) anchored, queue-depth sub-class)

What defenders observed

The cascade's constrained primitive shifted from redemption-path-absence (2022) and operator-blocked-redemption (2024) to queue-depth-saturation (2025) — but the cascade structure was unchanged. Pre-Shapella stETH had no redemption path at all. Pre-2024 ezETH had operator-blocked redemption. Post-Shapella stETH has a redemption path with a queue-depth-bounded throughput. All three produced the same cascade structure: secondary-market sell pressure → DEX pool / queue depth contraction → lending-market oracle propagation → looped-leverage liquidation cascade. The defender lesson is that the constrained primitive in T14.003 (b) is whatever bottlenecks 1:1 redemption on the relevant timescale — and any LST/LRT with any redemption-rate constraint relative to cascade-clearing demand is a sub-case (b) surface independent of the specific bottleneck.
Single-actor concentration risk is itself a T14.003 (b) detection signal independent of LST issuer or lending market. The proximate trigger was Justin-Sun-linked / HTX-affiliated wallet activity that was legitimate (a single entity rotating large balances) but exceeded the system's queue-depth and pool-depth capacity. The defender lesson is that the cascade can fire on any single-actor liquidity-rotation event of sufficient scale, regardless of intent. Lending markets with concentrated top-N depositors / borrowers are standing T14.003 (b) surfaces.
Aave's interest-rate model amplified the cascade through the carry-flip channel. The borrow-APR spike from ~3% to ~18% was the load-bearing economic shock that flipped the looped-leverage strategy's carry economics. Without the steep utilisation-rate slope in Aave's interest-rate model, the cascade would have propagated more slowly through pure stETH redemption demand. The defender lesson is that lending-market interest-rate model design is a T14.003 (b) propagation parameter — and looped-leverage strategies on top of a steep interest-rate curve are intrinsically more cascade-prone than on a flatter curve.
The validator-exit queue's churn-limit parameters bound the system's cascade-clearing capacity, and 2025 evidence is that they were not sized for the cascade's peak demand. The 743k ETH peak queue was the highest since January 2024 and produced multi-day-to-multi-week wait times for new withdrawal requests. The defender lesson is that the chain-level validator-exit queue's churn-limit parameter is itself a T14.003 (b) mitigation surface — and proposals for surge-capacity buffers or dynamic parameter adjustment under cascade conditions are first-class T14 protocol-research items.
The recovery posture (time + arbitrage; no operator-make-whole; no regulator action; no immediate protocol-parameter change) is the realistic 2025 ceiling for T14.003 (b) and matches the 2022 / 2024 cases. The cascade cleared through queue progression and secondary-market arbitrage; the cohort absorbed realised losses; structural fixes (chain-level queue parameter design, lending-market oracle methodology coordination) remain governance-paced through 2026. The defender lesson is consistent across the 2022 / 2024 / 2025 trio: T14.003 (b) cascade incidents do not produce operator-make-whole or regulator-driven recovery, and the structural mitigation operates at the protocol-design / cross-protocol-coordination layer.

What this example tells contributors writing future Technique pages

T14.003 sub-case (b) is now empirically anchored by a multi-cycle worked-example trio (2022 / 2024 / 2025) and is the most robustly evidenced T14 surface at v0.1. Contributors writing future T14.003 entries should treat the trio as the canonical reference set: 2022 Lido stETH (/examples/2022-06-lido-steth-depeg.md) for chain-level redemption-absence, 2024 Renzo ezETH (/examples/2024-04-renzo-ezeth-depeg.md) for operator-blocked redemption, 2025 Lido / Aave / queue-saturation (this case) for post-Shapella queue-depth saturation. Each illustrates a different constrained primitive within the same cascade structure.
Withdrawal-queue depth is a first-class T14.003 (b) detection signal that contributors should now monitor for any LST/LRT. The July 2025 case is the empirical anchor that queue-depth saturation is a viable cascade trigger even on protocols with native-redemption paths. Contributors writing future T14.003 (b) detection-signal sections should report (1) the constrained primitive's current depth / capacity, (2) the cascade-demand scenario that would saturate it, and (3) the queue-clearing time under saturation — as a first-class detection-signal triplet.
Single-actor concentration on lending-market deposits / borrows is itself a T14.003 (b) detection signal. The Justin-Sun-linked / HTX-affiliated wallet activity that triggered the July 2025 cascade was legitimate market behaviour, but its scale exceeded the system's response capacity. Contributors writing future T14.003 (b) detection-signal sections should report top-N depositor / borrower concentration on the affected lending markets as a structural detection signal, distinct from but related to the Curve-pool-depth concentration signal documented at the 2022 stETH case.
Lending-market interest-rate model design is a T14.003 (b) propagation parameter. The Aave wETH-pool's steep utilisation-rate slope amplified the cascade through the carry-flip channel. Contributors writing future T14.003 (b) entries on Aave-style lending markets should report the interest-rate model parameters explicitly and characterise the rate-spike trajectory under cascade conditions.
Chain-level validator-exit queue parameter design is a first-class T14 mitigation surface. Contributors writing future T14 mitigation entries should treat validator-exit-queue churn-limit design as a discrete protocol-research item alongside slashing-economic-design (T14.001), in-protocol PBS (T14.002), and Unique Stake Allocation (T14.003 sub-case (a)). The July 2025 case is the empirical anchor that this surface is operational.
The post-Shapella mitigation surface is not sufficient to retire T14.003 (b) for LSTs. Contributors writing future T14 entries should not treat the Shapella upgrade as a structural cure; it retired the chain-level redemption-absence sub-class but left the queue-depth-saturation sub-class operational. Similarly, LRT-issuer native-redemption-path activation through 2024–2025 retired the operator-blocked-redemption sub-class but left queue-depth saturation operational. Contributors should expect T14.003 (b) cascades to recur on any future cycle that combines high looped-leverage TVL + concentration shock + queue-depth saturation.

Public references

[defiantethexitqueue2025] — The Defiant, "ETH Unstaking Queue Hits Record High, Led by Justin Sun-Linked Addresses" (2025-07); primary attribution source for Justin-Sun-linked / HTX-affiliated wallet activity.
[blocksstethaavedepeg2025] — The Block, "Ethereum validator exit queue reaches highest point ever" (2025-07); primary numerical anchor for queue depth and cascade timeline.
[migalabsexitqueue2025] — MigaLabs, "Ethereum validator exit queue surge" (2025-07); structural-analysis source for queue-depth metrics and Aave borrow-APR trajectory.
[blocksexitqueuerecord2025] — The Block additional coverage on validator-exit-queue record; secondary numerical source.
[beincryptostethdepeg2025] — BeInCrypto, "Ethereum Whale's $1.7 Billion Exit from Aave Triggered stETH Depeg" (2025-07) / "Justin Sun's $600 Million Ethereum Exit Triggers stETH Depeg" (2025-07); primary attribution and cumulative-withdrawal source.
[blockworksstethloops2025] — Blockworks, "Ethereum stakers face 9-day wait as stETH loops fall into the red" (2025-07); structural-analysis source for the carry-flip framing.
[cryptoslatelidomarketshare2025] — CryptoSlate, "Lido faces three-year low in Ethereum staking market amid stETH depeg turmoil" (2025-07); primary source for Lido market-share figure.
[ainveststethdepeg2025] — AInvest, "Ethereum News Today: Lido's Ethereum staking share dips to 25% as stETH depegging and Aave rates drive exit pressures" (2025-07); secondary coverage source.
[steakhouselrt2024] — Steakhouse Financial steakLRT methodology and LRT risk-disclosure framework; pre-event documentation of the cascade pattern, applies to post-Shapella LST cohort.
[gauntletrestaking2024] — Gauntlet 2024 restaking-economy analysis; LRT collateral-health methodology and submodular-profit framework, references queue-depth-aware oracle methodology.
[heimbachleveragestaking2023] — Heimbach et al., "Leverage Staking with Liquid Staking Derivatives (LSDs)" (IACR ePrint 2023/1842); academic analysis with leverage-cohort sizing methodology.

Citations

[defiantethexitqueue2025] — The Defiant; primary attribution / cumulative-withdrawal source.
[blocksstethaavedepeg2025] — The Block; primary queue-depth and cascade-timeline source.
[migalabsexitqueue2025] — MigaLabs; structural-analysis source for queue-depth + Aave borrow-APR.
[blocksexitqueuerecord2025] — The Block; secondary numerical source for queue-record.
[beincryptostethdepeg2025] — BeInCrypto; primary attribution and withdrawal-amount source.
[blockworksstethloops2025] — Blockworks; carry-flip structural analysis.
[cryptoslatelidomarketshare2025] — CryptoSlate; primary source for Lido market-share figure.
[ainveststethdepeg2025] — AInvest; secondary coverage.
[steakhouselrt2024] — Steakhouse Financial LRT methodology.
[gauntletrestaking2024] — Gauntlet restaking-economy analysis.
[heimbachleveragestaking2023] — Heimbach et al. academic analysis.

Discussion

The July 2025 Lido stETH / Aave validator-exit-queue and looped-leverage depeg cascade is OAK's post-Shapella anchor for T14.003 sub-case (b) and the canonical worked example for the withdrawal-queue-depth saturation sub-class within the broader cascade pattern. The case completes a multi-cycle worked-example trio for T14.003 (b): 2022 Lido stETH chain-level redemption-absence (/examples/2022-06-lido-steth-depeg.md), 2024 Renzo ezETH operator-blocked redemption (/examples/2024-04-renzo-ezeth-depeg.md), and 2025 Lido / Aave queue-depth saturation (this case). All three share the cascade structure — secondary-market sell pressure → bottlenecked redemption → lending-market oracle propagation → looped-leverage liquidation cascade — but each illustrates a different constrained primitive.

The structural significance of the 2025 case is that it demonstrates the cascade pattern's operability despite the post-Shapella structural-fix narrative. The 2022 cascade was widely framed as "fixed by Shapella + native redemption"; the 2024 ezETH cascade was widely framed as "fixed by LRT issuers shipping native withdrawals." The July 2025 case shows that neither structural fix retires the T14.003 (b) surface — they retire specific sub-classes (chain-level redemption-absence and operator-blocked redemption respectively), but the queue-depth-saturation sub-class remains operational on any chain whose validator-exit queue has churn-limit-bounded throughput (which is all major PoS chains by design).

The single-actor concentration trigger (Justin-Sun-linked / HTX-affiliated wallets) is a structural feature of the case that contributors writing future T14.003 (b) entries should treat as a recurring detection signal. The cascade fired on legitimate market behaviour (an entity rotating ~$1.7B of balance) that exceeded the system's response capacity. Concentration-shock-as-cascade-trigger is structurally unlike adversarial attack patterns, and the cascade's mitigation surface is at the lending-market and chain-level parameter design layer rather than the attack-detection layer.

The recovery posture — time + arbitrage; no operator-make-whole; no regulator action; no immediate protocol-parameter change — is consistent across the 2022 / 2024 / 2025 trio and provides contributors with a clear precedent for the realistic T14.003 (b) recovery ceiling. Structural mitigations (chain-level queue parameter design, lending-market oracle methodology coordination, lending-market LTV calibration for queue-saturation tail risk) remain governance-paced and cross-protocol; per-incident operator response is not the canonical recovery primitive.

For OAK's broader credibility, including the July 2025 case as the post-Shapella T14.003 (b) anchor closes a temporal gap and establishes the cascade pattern as multi-cycle and structural rather than as one-time pre-Shapella event. The case is the empirical evidence that contributors writing future T14.003 (b) entries cannot treat the post-Shapella era as a structural-fix endpoint; the surface remains operational, the constrained primitive can shift, and contributors should expect the cascade pattern to recur on any combination of high looped-leverage TVL + concentration shock + queue-depth saturation. This is the canonical 2025 worked example for that operability claim.