- Balancer loses $128M in exploit, security teams investigate breach.
- Smart contract flaw linked to $128M Balancer exploit and ongoing attack.
- BAL token drops 4% as exploit drains millions from vaults.
Balancer, a decentralized exchange and automated portfolio manager, has fallen victim to a significant exploit, leading to a loss of $128.6 million in assets. PeckShield, a blockchain security organization, reported that it noticed suspicious activity in the Etherscan web interface as the Balancer account transmitted large amounts of money on the 0xBA1…BF2C8 address to an external wallet.
These transfers consisted of 6,587 WETH ($24.5 million), 6,851 osETH ($26.9 million), and 4,260 wstETH ($26.3 million), which is suspiciously large for a security breach.
UPDATE: The attack is ongoing. The estimated loss is ~$88M on multiple chains https://t.co/tu7d5SKYy7
— PeckShieldAlert (@PeckShieldAlert) November 3, 2025
Reacting to the state of affairs, Balancer stated that it is investigating the exploit. The engineers and security team at the protocol are now working on trying to pinpoint the source of the attack. The team also reported that they would provide confirmed updates whenever more information becomes available.
According to blockchain analytics companies such as Nansen, the transactions have been flagged, indicating the severity of the exploit and its potential for continuity.
Also Read: Hong Kong Securities Watchdog Examines Digital Asset Treasuries
Investigation Points to Smart Contract Vulnerability
Mikko Ohtamaa, the CEO of Trading Strategy, has proposed that a flaw in the smart contract is likely to be responsible for the exploit. As Ohtamaa argues, the bug can only be applicable to specific versions of Balancer, so not all implementations of the protocol are affected. However, even older v2 forks of Balancer may be susceptible, which may multiply the overall losses.
An OG Ethereum DEX Balancer got rekt for ~$70M.
— Mikko Ohtamaa (@moo9000) November 3, 2025
GM.
Root cause (kudos to Defimon Signals) was a faulty check.
Still not clear what Balancer versions are affected, but not all of them. https://t.co/eVfRugvZlO pic.twitter.com/Ao6CkU0BFk
Additionally, PeckShield has noted that the attack persists in various chains where Balancer is deployed, so far, indicating that the exploit has not been fully mitigated.
Impact on Balancer’s Token and User Activity
The exploit has had a significant impact on the Balancer token price. The native token of Balancer, called BAL, fell by more than 4% following the announcement of the exploit. Such a drastic drop in value can only be explained by the market’s reaction to the breach, which indicated increased doubts regarding the security and stability of the protocol.
Relatedly, a whale that had not been active in over three years withdrew a substantial amount of $6.5 million from the platform following the discovery of the exploit. This act highlights the growing anxiety of users as they fight over their possessions.
DeFi’s Security Under Scrutiny
One of the most impactful platforms in the DeFi sector is Balancer, which debuted in 2020 and oversees a total value locked of over $350 million. Nevertheless, this adventure raises questions about the future safety of decentralized finance systems.
Also Read: Uphold Brings Back U.S. Debit Card with XRP Rewards
How would you rate your experience?