Balancer DeFi is targeted in an attack and loses over US$110 million in assets.
- Flaw in smart contracts drains Balancer's V2 vaults.
- Theft exceeds US$110 million across multiple blockchains.
- Auditors investigate attack that exploited protocol's compostable design.
Balancer suffered another serious attack, with estimated losses between US$110 and US$116 million across various blockchains. The incident primarily affected the protocol's V2 vaults and liquidity pools, exploiting a vulnerability in smart contract interactions.
According to on-chain analysis released by experts, including analyst Adi (@AdiFlips), the attack began with the deployment of a malicious contract that manipulated internal Vault calls during pool initialization. This manipulation allowed the attacker to bypass security mechanisms and execute unauthorized exchanges between interconnected pools, draining funds in a matter of minutes.
Here's everything you need to know about the Balancer Hack:
1. The attack targeted Balancer's V2 vaults and liquidity pools, exploiting a vulnerability in smart contract interactions. Preliminary analysis from on-chain investigators points to a maliciously deployed contract that… pic.twitter.com/udAM4hB0OD
— Adi (@AdiFlips) November 3, 2025
The attack vector involved authorization flaws and incorrect callback handling, opening loopholes for balance manipulation and cascading swaps. A key transaction on the Ethereum network—identified as 0xd155207261712c35fa3d472ed1e51bfcd816e616dd4f517fa5959836f5b48569—directed assets to a new wallet controlled by the attacker. The funds were then consolidated and possibly routed to mixing services or cross-chain bridges, making them difficult to trace.
Balancer's compostable architecture, in which pools interact intensely with each other, ended up amplifying the vulnerability. Similar attacks have already hit other automated market makers (AMMs), especially when they involve deflationary tokens or pool rebalancing mechanisms.
Auditors such as PeckShield and Nansen are conducting detailed forensic investigations and have confirmed that the attack was purely technical, with no evidence of compromise of private keys. The losses include large amounts of WETH, wstETH, osETH, frxETH, rsETH, and rETH — with Ethereum being the most affected, with approximately US$70 million drained.
The impact also extended to the Base, Sonic, and Polygon networks, totaling approximately US$9 million in additional damage. Derived protocols such as Beets.fi and Berachain were compromised due to the use of similar code components.
The BAL token fell between 5% and 8% after the attack was confirmed. To date, Balancer has not released details on mitigation measures or potential compensation for users, while emergency recommendations include immediate withdrawal of funds, revocation of permissions, and active monitoring of affected wallets.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
The AI boom may follow the path of the 19th-century railway bubble, and builders may not be the ultimate winners
Goldman Sachs analyst Bobby Molavi compared the current situation to the 19th-century British railway mania: 500 companies spent more than the nation's annual income building 8,000 miles of railway, with most early investors losing out, while the real beneficiaries were the later "passengers." He pointed out that the current AI craze is driven by both debt and momentum, and that the S&P 500’s forward P/E ratio of 18x is only "a bit cheaper." Whether the builders can retain value is uncertain, and history does not offer an optimistic answer.
If Anthropic's IPO goes smoothly and the stock price rises next week, then everything remains the same for AI. Otherwise, some companies will go bankrupt.
The shrinking valuations of two major giants have triggered a chain reaction—investors are adopting more conservative revenue multiples for AI startups and are directly halting high-valuation financing for companies with zero revenue. Multiple venture capital firms have advised their portfolio companies to lower valuation expectations and to quickly build up cash reserves. Market participants warn that the outcome of Anthropic’s IPO will be a barometer for the industry: if successful, the boom will continue; if it fails, some companies may face elimination.
After the Brazilian election, political discount deepens; Morgan Stanley remains bullish on Petrobras (PBR.US), focusing on fuel pricing and dividends
Morgan Stanley still maintains its most optimistic "Overweight" rating, but has lowered its year-end 2027 target price from $31 to $25.
Corning (GLW.US) receives initial "Buy" rating from Jefferies! AI factories driving a fiber optic rush, with a potential global supply gap of up to 30%
For Corning, the recent profit growth mainly comes from the expansion of AI clusters. As the number of optical links crossing cabinets and campuses increases, customers need to deploy more optical fibers within limited conduit and cabinet space, thus driving demand for high-density optical cables and connection systems.
Crypto prices
More
