Balancer Loses $70 Million in Third Security Breach

Balancer lost at least $70 million in a smart contract exploit that drained liquidity pools on November 3.

Attackers exploited a flaw in Balancer's "manageUserBalance" function, draining liquidity from V2 vaults. Stolen assets included 6,590 wrapped Ether (WETH), 6,851 osETH, and 4,260 wstETH tokens. Balancer operates over $750 million in total value locked across decentralized liquidity pools.​

Multi-Chain Impact

The exploit affected Balancer deployments on Sonic, Polygon, and Base blockchains. Forked protocols Beets.fi and Berachain were also compromised due to shared codebase vulnerabilities. Security firms Decurity, HashDit, and Cyvers confirmed the attack through on-chain analysis.​

Third Breach Since 2020

Balancer previously suffered exploits in 2020 and 2023. The protocol's native BAL token dropped 5-8% following the breach. Balancer has not issued a statement on recovery or user compensation.