Balancer audits under scrutiny after $100M+ exploit
Many cryptocurrency traders are seeking answers after a successful exploit at the decentralized exchange and automated market maker Balancer resulted in more than $100 million in digital assets being stolen.
In a Monday X post updating users on the exploit, Balancer said the incident was “isolated to V2 Composable Stable Pools and does not impact Balancer V3 or other Balancer pools.”
The platform added that it had “undergone extensive auditing by top firms, and had bug bounties running for a long time to incentivize independent auditors,” calling into question how the exploit was accomplished.
“Balancer went through 10+ audits,” said Suhail Kakar, a developer relations lead at the TAC blockchain on X. “The vault was audited [three] separate times by different firms still got hacked for $110M. This space needs to accept that ‘audited by X’ means almost nothing. Code is hard, DeFi is harder.”
According to a list of Balancer V2 audits available on GitHub, four different security companies — OpenZeppelin, Trail of Bits, Certora, and ABDK — conducted 11 audits of the platform’s smart contracts, with the most recent on its stable pool by Trail of Bits in September 2022.
Cointelegraph reached out to OpenZeppelin for comment, but had not received a response at the time of publication. A Trail of Bits spokesperson declined to comment on the exploit “until the root cause is identified and all Balancer forks are safe.”
Related: ‘Attack on Bitcoin’ — Bitcoiners slam ‘legal threats’ in soft fork proposal
The exploit, reported early on Monday, resulted in more than $116 million worth of staked Ether (ETH) — including StakeWise Staked ETH (OSETH), Wrapped Ether (WETH) and Lido wstETH (wSTETH) — being moved to a newly created wallet. A Nansen research analyst told Cointelegraph that the Balancer incident could have stemmed from smart contract issues that had a “faulty access check allowing the attacker to send a command to withdraw funds.”
Project offers a 20% white hat bounty for returning funds
In a blockchain transaction note addressing the attackers on Monday, Balancer’s team offered a white hat bounty of up to 20% of the stolen funds if the full amount was returned within 48 hours of the notice.
“[I]f you choose not to cooperate, we have engaged independent blockchain forensics specialists and are actively cooperating with multiple law-enforcement agencies and regulatory partners,” said Balancer.
At the time of publication, the project had not announced any additional updates on the bounty or details of the exploit.
Magazine: Solana vs Ethereum ETFs, Facebook’s influence on Bitwise: Hunter Horsley
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
The AI boom may follow the path of the 19th-century railway bubble, and builders may not be the ultimate winners
Goldman Sachs analyst Bobby Molavi compared the current situation to the 19th-century British railway mania: 500 companies spent more than the nation's annual income building 8,000 miles of railway, with most early investors losing out, while the real beneficiaries were the later "passengers." He pointed out that the current AI craze is driven by both debt and momentum, and that the S&P 500’s forward P/E ratio of 18x is only "a bit cheaper." Whether the builders can retain value is uncertain, and history does not offer an optimistic answer.
If Anthropic's IPO goes smoothly and the stock price rises next week, then everything remains the same for AI. Otherwise, some companies will go bankrupt.
The shrinking valuations of two major giants have triggered a chain reaction—investors are adopting more conservative revenue multiples for AI startups and are directly halting high-valuation financing for companies with zero revenue. Multiple venture capital firms have advised their portfolio companies to lower valuation expectations and to quickly build up cash reserves. Market participants warn that the outcome of Anthropic’s IPO will be a barometer for the industry: if successful, the boom will continue; if it fails, some companies may face elimination.
After the Brazilian election, political discount deepens; Morgan Stanley remains bullish on Petrobras (PBR.US), focusing on fuel pricing and dividends
Morgan Stanley still maintains its most optimistic "Overweight" rating, but has lowered its year-end 2027 target price from $31 to $25.
Corning (GLW.US) receives initial "Buy" rating from Jefferies! AI factories driving a fiber optic rush, with a potential global supply gap of up to 30%
For Corning, the recent profit growth mainly comes from the expansion of AI clusters. As the number of optical links crossing cabinets and campuses increases, customers need to deploy more optical fibers within limited conduit and cabinet space, thus driving demand for high-density optical cables and connection systems.
Crypto prices
More
