Skip to main content
AVOID.NET
Sign in

Tender Finance

avoid.net/tender-finance→32/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·4z22vp…tjNk

Summary

Tender Finance (tender.fi) was an Arbitrum-based decentralized lending and borrowing protocol that suffered a $1.59 million oracle misconfiguration exploit on March 7, 2023. A white hat hacker exploited a decimal precision error in the GMX price oracle, depositing one GMX token worth approximately $71 to borrow nearly $1.6 million in assets. The hacker returned funds in exchange for a $97,000 bounty, and the project subsequently rebranded to GLend under the Gemach DAO umbrella, migrating its TND token to GLEND and later to GMAC.

Connected Entities

5 entities · 60 linked investigations
Organizations
□Aave74□Chainlink67□Arbitrum52□ZachXBT
Protocols
⌂Tender Finance
Relationships
  • Tender Finance→mentioned with→Chainlink(60%)
  • Tender Finance→mentioned with→ZachXBT(70%)
  • Tender Finance→mentioned with→Arbitrum(70%)
  • Tender Finance→mentioned with→Aave(60%)
  • Aave→mentioned with→Arbitrum(70%)
  • Arbitrum→mentioned with→Aave(70%)
  • Aave→mentioned with→Chainlink(60%)
Also appears in
Edel Finance·28KelpDAO Bridge Exploit (April 2026)·18Arbitrum·52Aave·74Dough Finance·12World Liberty Financial (WLFI)·22LND·12Ankr (ankrFLOW Collateral Exploit)·38Makina Finance·24Q2 2026 Record Crypto Hack Wave·0+ 50 more
Have evidence about Tender Finance?

Timeline(8 events)

2022

Tender Finance launches on Arbitrum as a decentralized lending and borrowing protocol focused on GMX and GLP collateral.

20 February 2023

TND token reaches its all-time high price of approximately $7.60.

7 March 2023

Oracle misconfiguration exploit: white hat hacker deposits 1 GMX token (~$71) and borrows $1.59 million due to a 38-decimal-place price error in the GMXPriceOracle contract. Tender Finance halts lending operations.

7 March 2023

Hacker leaves on-chain message: 'It looks like your oracle was misconfigured. Contact me to sort this out.' Protocol contacts hacker and negotiates fund return.

8 March 2023

White hat hacker returns all $1.59 million in funds to the protocol. Tender Finance confirms funds are safe and pays 62.16 ETH (~$97,000) bounty. CoinDesk and The Block report on the resolution.

October 2023

Tender Finance submits application for Arbitrum STIP Round 2 under the 'Gemach DAO' name.

19 October 2023

@Tender_fi announces token migration from TND to GLEND (Gemach Lend) on a 1:1 basis.

15 January 2024

GLend (formerly Tender Finance) announces further token migration from GLEND to GMAC as part of the Gemach DAO ecosystem expansion.

Provenance & Audit Trail
Anchored on SolanaVerify on-chain12 Wayback Archivessrc:defillama

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 12 of 13 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:43 AM

last updated: 8/29/2026, 1:34:42 AM

5 views

avoid.net — verified advice for a post-truth world