The collapse of Terra/Luna in May 2022 wasn’t a hack — and that’s exactly why it belongs in every security curriculum. On 9 May 2022, the algorithmic stablecoin UST (TerraUSD) lost its dollar peg in a violent run triggered by a coordinated series of large withdrawals on Curve liquidity pools; the protocol’s stabilisation machinery (mint/burn arbitrage against sister-token LUNA) responded exactly as designed, minting ever-more LUNA to absorb the UST being sold — which hyperinflated LUNA’s supply and crashed its price, which destroyed confidence in the backing mechanism, which accelerated the UST run: a death spiral with no off-ramp. Within days, UST hit $0.10, LUNA — which had traded near $80 a week earlier — went effectively to zero, and roughly $60 billion of combined market value evaporated, taking with it the savings of retail holders, the reserves of ecosystem funds (including the Luna Foundation Guard’s ~$3 billion Bitcoin stash, deployed in a failed defence), and the solvency of crypto lenders exposed to the pair (Celsius, Voyager, Three Arrows Capital fell in the following weeks). The security lessons are structural rather than exploit-shaped: the system failed through economic attack surface — a peg maintained by market incentives is load-bearing infrastructure that adversarial capital can stress, and its failure mode cascades through every dependent protocol; the “decentralisation” narrative obscured that governance (Do Kwon’s Terraform Labs) held the keys to the defence playbook; and the disappearance of LFG’s BTC reserve deployment telemetry during the fight became its own forensics story. Terra is the case study that forced DeFi’s security model to grow up: mechanism design, reserve transparency, and run-dynamics modelling are threat modelling, not just economics.
May 2022’s Terra/Luna collapse: the algorithmic stablecoin UST (TerraUSD) depegged on 2022-05-09 after large withdrawals from its Curve liquidity venue, and the protocol’s mint/burn mechanism — designed to stabilise UST by minting LUNA to absorb sells — instead produced a death spiral: UST sell pressure → LUNA hyperinflation (supply ~342M→6.5T in a week) → LUNA price collapse → backing confidence gone → accelerating UST run. Result: UST ~$0.10, LUNA from ~$80 to effectively zero, ~$60B combined value erased in days. The Luna Foundation Guard (LFG) deployed/lost its ~$3B BTC reserve defending the peg (on-chain flows visible; final holdings effectively drained). Contagion: lenders Celsius, Voyager, and fund Three Arrows Capital (3AC) — all heavily UST/LUNA-exposed — collapsed June–July 2022. Founder Do Kwon faced SEC fraud charges (2023, arrested in Montenegro on false-passport charges; US extradition litigation through 2024–25) and Terraform Labs settled/bankrupted. Not a hack: no exploit, no stolen keys — a mechanism-design failure under adversarial market stress (the initiating trades remain debated: organic run vs coordinated attack; on-chain evidence suggests large withdrawals preceding the spiral, attribution inconclusive). Security meaning: (1) pegged-asset mechanisms are attackable economic infrastructure — reserve design, run dynamics, and reflexive feedback are threat-model inputs; (2) transparency of reserves (LFG’s BTC wallets) is both a defence and an attack surface (attackers can time strikes against known reserves); (3) contagion mapping — who depends on the mechanism — is incident response for DeFi; (4) “it’s decentralised” governance claims must be tested before crises, because the LFG/Terraform defence decisions were centralised in practice.
What happened
UST was a bet that a stablecoin could hold its peg without full collateral: instead of a dollar in a bank per token, UST’s peg relied on an arbitrage mechanism — holders could always swap $1 of UST for 1 LUNA (minted on demand) and vice versa, so any peg deviation should attract arbitrageurs who profit by pushing it back. LUNA captured the ecosystem’s value (staking, governance, fees), and by early 2022 the system had scaled to tens of billions, with the Luna Foundation Guard accumulating a ~$3B Bitcoin war chest to backstop confidence.
On 7–9 May, large UST withdrawals from the protocol’s principal Curve liquidity pool began — millions at a time, curiously timed, and enough to skew the pool’s balance. Depegging started (UST ~$0.98, then lower); the mint/burn machinery responded by minting LUNA to meet UST redemptions; but each LUNA minted diluted the token absorbing the sells, so LUNA’s price fell; a falling LUNA made UST’s implicit backing look weaker; Anchor Protocol (where most UST was staked at ~20% APY, itself a sustainability question-mark) saw its own bank-run dynamics as depositors fled; and the flight path was self-reinforcing. Exchanges suspended trading; LFG deployed BTC in defence; the market absorbed and overwhelmed it. By 12–13 May, UST traded below $0.20 and LUNA’s supply had gone from ~350M to trillions — hyperinflation rendered terminal.
The aftermath was a domino line: crypto lenders and funds holding UST/LUNA or exposed to their borrowers — Three Arrows Capital first (it had taken a large swap position), then Celsius and Voyager by July — became insolvent, cascading into the year’s broader crypto winter. Do Kwon’s legal arc (SEC civil fraud charges, Montenegro arrest on a false passport in 2023, extradition battles) and Terraform Labs’ bankruptcy closed the corporate story; a revived chain (Terra 2.0) continued as a smaller ecosystem.
The death spiral mechanics
Terra/UST stabilisation vs death spiral:
DESIGNED MECHANISM (steady state)
UST peg = $1 maintained by
mint/burn arbitrage:
$1 UST redeemable for
1 LUNA (minted new)
1 LUNA burnable for
$1 UST
deviation -> arbitrageur
profits restoring peg
LUNA value = ecosystem fees
+ staking + speculative demand
Anchor ~20% APY on UST drove
demand (subsidised growth)
STRESS EVENT (2022-05-07/09)
large Curve-pool UST
withdrawals skew pool
UST dips below $1
redemptions: UST -> mint LUNA
-> LUNA supply expands while
its price drops
REFLEXIVITY (the spiral)
falling LUNA weakens perceived
backing -> more UST sells
-> more LUNA minted at lower
prices -> death loop
Anchor withdrawals compound
(bank-run on the demand side)
BACKSTOP FAILED
LFG ~$3B BTC deployed into
thin markets; absorbed within
days; reserve effectively gone
(on-chain visible)
TERMINAL STATE
UST ~$0.10; LUNA supply
~350M -> 6.5T tokens; combined
value ~$60B erased in ~1 week
CONTAGION PATH
3AC (LUNA position) -> lenders
(Celsius, Voyager) exposed to
3AC/bad collateral -> insolvency
wave June-July 2022Impact and numbers
| Metric | Value |
|---|---|
| Depeg start | 2022-05-07/09 (Curve pool withdrawals, UST → $0.98 → lower) |
| Terminal state | UST ~$0.10; LUNA ~zero (from ~$80 week prior) |
| Value erased | ~$60B combined market cap within a week |
| LUNA supply | ~350M → ~6.5T tokens (hyperinflation) |
| LFG reserve | ~$3B BTC deployed/lost in peg defence |
| Anchor exposure | Majority of UST staked at ~20% APY (demand-side fragility) |
| Contagion | 3AC (June), Celsius + Voyager (June–July) insolvencies; crypto-winter acceleration |
| Legal aftermath | SEC fraud charges vs Do Kwon; 2023 Montenegro arrest (false passport); Terraform bankruptcy; revived chain continues smaller |
Timeline
| Date | Event |
|---|---|
| 2022 early | UST scales to top-3 stablecoin; LFG accumulates ~$3B BTC; critics question Anchor’s 20% APY sustainability |
| 2022-05-07/09 | Large Curve withdrawals; UST depegs; mint/burn machinery engages |
| 2022-05-10→12 | Spiral compounds: LUNA hyperinflates, UST → $0.30s then lower; exchanges halt; LFG BTC deployed and overwhelmed |
| 2022-05-13→16 | Chain halted twice; UST ~$0.10; LUNA effectively zero; revival plan (Terra 2.0) floated |
| 2022-06→07 | Contagion: 3AC default → Celsius/Voyager freeze/insolvency |
| 2023→2025 | Do Kwon arrested (Montenegro), SEC/extradition litigation; Terraform bankruptcy settled; post-mortem literature cements the design-failure lesson |
Why it still matters in 2026
Because Terra defined the failure class that post-2022 financial-crypto regulation, DeFi risk engineering, and attack-surface analysis all now reference. The industry’s honest takeaway was that “no one hacked it” is not a defence: a mechanism whose stability depends on market incentives is adversarial infrastructure, and its collapse — whether triggered by coordinated capital (the initiating withdrawals remain attribution-open) or simply by reflexive panic — is a security event with victims, forensics, and cascades. Post-Terra design doctrine is explicit: fully-collateralised and audited reserves, transparent attestation, stress-tested run dynamics (what does holder concentration look like at the withdrawals-per-hour extreme?), circuit breakers, and honest governance documentation — because when LFG’s BTC moved, “decentralisation” turned out to mean a handful of insiders making trillion-dollar-impact decisions on a WhatsApp timeline. The regulatory arc also runs through Terra: the collapse’s $60B hole directly motivated stablecoin legislation frameworks (US/EU MiCA’s reserve-and-attestation requirements, 2023–2025 policy drafts) and the enforcement template applied to Terraform and its founder. In 2026’s DeFi curricula, Terra sits beside Ronin and Beanstalk as the third 2022 pillar: stolen keys, borrowed votes, and a broken peg — the trio that taught defenders to model economics as exploit surface.
Detection and hardening takeaways
- Model run dynamics as an attack scenario. Any pegged or leveraged mechanism needs stress tests simulating coordinated exits (concentration analysis, withdrawal velocity, reflexive feedback loops); Terra’s spiral was foreseeable on paper — the post-mortems that mapped it existed before May 2022 and were ignored.
- Reserve transparency with timeliness guarantees. LFG’s BTC was visible on-chain but its deployment decisions weren’t; real-time reserve attestation (and disclosure rules for defence interventions) converts backstops from folklore into auditable controls — and lets counterparties price their exposure honestly.
- Map contagion before it happens. Exposures (Anchor deposits, 3AC’s book, lender collateral stacks) formed the kill-chain into Celsius/Voyager; protocol operators and funds now maintain dependency graphs of who-holds-what so a failing primitive triggers exposure triage, not surprise.
- Treat sustainability subsidies as fragility. Anchor’s 20% APY concentrated the ecosystem’s demand in one subsidised bucket; when the subsidy wobbled, the bank run had a single door. Mechanism designers post-Terra cap concentration (per-holder ceilings, graduated exit costs) and audit “growth paid by reserve depletion” schemes.
- Watch the whale wallets. The initiating Curve withdrawals were large, sequenced, and visible on-chain; monitoring infrastructure that alerts on pool-skew and large positioning shifts buys hours of response time — the unit in which pegs are defended or lost.
FAQ
Was Terra hacked?
No exploit occurred — no stolen keys, no smart-contract bug, no oracle manipulation. The mechanism functioned as coded, and that’s the lesson: it functioned into a death spiral. Debate continues over whether the initiating withdrawals were coordinated adversarial capital (attack) or an organic run sparked by depeg fear (panic); on-chain evidence shows preparation-scale positioning but attribution is inconclusive. Either way, the security analysis is identical: the system’s economics were its attack surface.
What happened to the $3B Bitcoin reserve?
The Luna Foundation Guard deployed it — in tranches, visibly on-chain — trying to defend the peg through the spiral’s worst days, and the market absorbed it without the peg recovering; what remained was effectively drained in the aftermath (used in operations/lawyering/by creditors’ processes). The episode is the canonical demonstration that a backstop smaller than the run it faces is not a backstop, and that publicly-known reserve locations invite timing by adversaries.
Did anyone go to jail?
Founder Do Kwon was arrested in Montenegro in 2023 on false-travel-document charges (while carrying doctored passports), triggering US/South Korean extradition litigation that continued into 2024–2025 alongside SEC civil fraud proceedings; Terraform Labs entered bankruptcy and reached settlement. Whether any individual faces criminal conviction for the collapse itself, the corporate and regulatory reckonings established the enforcement template: mechanism designers bear legal accountability for economically catastrophic systems sold with misleading assurances.
