Balancer pools exploited after last week’s vulnerability reveal

Balancer has removed the majority of funds from affected pools prior to exploit

article-image

New Africa/Shutterstock modified by Blockworks

share

DeFi liquidity protocol Balancer suffered an exploit following the discovery of a critical vulnerability in its v2 pools last week.

The Balancer team acknowledged Sunday that they are aware of the exploit and most funds in affected pools have been withdrawn. 

Meir Dolev, the chief technology officer of blockchain security company Cyvers.AI, noted in a post on X yesterday that the attacker had secured $900k from the exploit. 

Loading Tweet..

Following the vulnerability’s discovery, liquidity providers were asked to exit their positions through a proportional exit

Read more: ‘Critical vulnerability’ reported in Balancer v2 pools

An earlier Balancer post noted that over 99.7% of liquidity originally at risk is now safe and only 0.08% of the total value locked (TVL) remained at risk. 

Blockchain security company PeckShield questioned this figure in a Monday post, contending that their analysis indicates more than $2.1 million remains in affected v2 pools.

“The Balancer team has done a great job in alerting the community to remove liquidity from affected vaults, the original estimate of “only 0.08% of total TVL ($565,199) remains at risk” seems to be seriously mis-calculated,” PeckShield tweeted. 

Loading Tweet..

At the time of writing, Balancer’s native token (BAL) was trading at $3.51, a little below $3.6 prior to the discovery of the vulnerability.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Brooklyn, NY

SUN - MON, JUN. 22 - 23, 2025

Blockworks and Cracked Labs are teaming up for the third installment of the Permissionless Hackathon, happening June 22–23, 2025 in Brooklyn, NY. This is a 36-hour IRL builder sprint where developers, designers, and creatives ship real projects solving real problems across […]

recent research

Unlocked by Template (7).png

Research

Union’s improvements upon Tendermint consensus through CometBLS, coupled with ZK proving through Galois, allow for a broadly scalable, cost efficient, and low latency IBC implementation that is feasibly scalable across every existing blockchain, virtual machine and runtime. The implementation offers modular crosschain interoperability without the need for trusted intermediaries.  

article-image

Kraken’s chief security officer Nick Percoco said the exchange turned the tables on a North Korean hacker

article-image

Or is it approximately the least cypherpunk thing we could do?

article-image

Over 20% of SOL-USD swap volume goes through SolFi

article-image

CEO Vlad Tenev calls expected clarity on listing crypto asset securities “a big opportunity”

article-image

Big Tech pulled US indexes back into the green Thursday, as investors waited for two more Mag 7 first-quarter reports after the bell

article-image

Charts and takeaways from Tuesday’s jobs report and Wednesday’s GDP print, as the economy digests the tariff war