The moved assets included StakeWise Staked Ether (OSETH), Wrapped Ether (WETH), and Lido wstETH (wSTETH).
\nIn September 2023, Balancer suffered a phishing attack that resulted in a loss of about $238,000.
\nA separate August exploit drained nearly $1 million after a vulnerability was found in Balancer\u2019s liquidity pools.<\/p>\n
A suspected exploit involving nearly $70 million worth of digital assets has once again placed Balancer, one of Ethereum\u2019s leading decentralised exchanges, under scrutiny.<\/p>\n
The incident has reignited debate over the security of decentralised finance (DeFi), where transparency and automation often coexist with deep structural vulnerabilities.<\/p>\n
It also shows how core DeFi features such as permissionless access, open-source code, and composable smart contracts can quickly turn into liabilities when targeted by skilled attackers.<\/p>\n
For Balancer, the breach adds to a growing record of cyber incidents that are reshaping risk perceptions across digital finance and prompting calls for stronger, coordinated defences across the DeFi ecosystem.<\/p>\n
Blockchain records\u00a0on\u00a0Etherscan show<\/a> that $70.9 million in assets were moved from Balancer liquidity pools to a newly created wallet via<\/span>\u00a0three transactions.<\/p>\n Data<\/a> from analytics firm Nansen identified the transferred assets as 6,850 StakeWise Staked Ether (OSETH), 6,590 Wrapped Ether (WETH), and 4,260 Lido wstETH (wSTETH).<\/p>\n On-chain analysts began tracking the wallet\u2019s behaviour, observing similarities to previous DeFi drain patterns.<\/p>\n Blockchain security firm Cyvers reported that up to $84 million in suspicious transactions across multiple chains may be linked to Balancer.<\/p>\n The firm is currently analysing whether the transfers were coordinated through smart-contract vulnerabilities or facilitated by an external exploit exploiting inter-protocol liquidity flows.<\/p>\n In September 2023<\/a>, the protocol\u2019s website was compromised through a domain name system (DNS) hijack that redirected users to a phishing interface.<\/p>\n Hackers executed malicious smart contracts designed to capture private keys and drain funds, resulting in losses of approximately $238,000, according to blockchain investigator ZachXBT<\/a>.<\/p>\n Just a month earlier, in August, Balancer reported<\/a> a stablecoin exploit that cost liquidity providers nearly $1 million.<\/p>\n That incident occurred shortly after the team disclosed a \u201ccritical vulnerability\u201d affecting certain liquidity pools, which had been partially mitigated but remained exploitable in specific configurations.<\/p>\n The recurrence of incidents within such a short timeframe suggests that DeFi\u2019s open-source nature, while fostering innovation, also provides attackers with an evolving blueprint to target protocol weaknesses.<\/p>\n These breaches demonstrate that security audits alone are insufficient without continuous on-chain monitoring and real-time risk mitigation systems.<\/p>\n The Balancer case illustrates a paradox at the heart of decentralised finance.<\/p>\n By removing intermediaries, protocols achieve transparency and autonomy, while also eliminating the possibility of intervention when funds are misappropriated.<\/p>\n Unlike centralised exchanges that can freeze or reverse transactions, DeFi protocols operate on immutable smart contracts.<\/p>\n Once exploited, losses are permanent and typically unrecoverable.<\/p>\n This structural rigidity has drawn criticism from institutional investors who view such vulnerabilities as barriers to large-scale adoption.<\/p>\n In response, some DeFi projects have introduced layered defences such as decentralised insurance pools, advanced audit frameworks, and formal verification of contract code.<\/p>\n However, these measures remain inconsistent across the ecosystem.<\/p>\n Balancer\u2019s repeated security issues may therefore serve as a case study in how liquidity incentives and composability can amplify systemic exposure.<\/p>\n As DeFi protocols become more interconnected through shared token standards and cross-chain bridges, a single compromised smart contract can trigger cascading financial risks across multiple platforms.<\/p>\n The post Balancer\u2019s $70 million breach exposes DeFi\u2019s fragile foundation<\/a> appeared first on CoinJournal<\/a>.<\/p>","protected":false},"excerpt":{"rendered":" The moved assets included StakeWise Staked Ether (OSETH), Wrapped Ether (WETH), and Lido wstETH (wSTETH). In September 2023, Balancer suffered a phishing attack that resulted in a loss of about $238,000. A separate August exploit drained nearly $1 million after a vulnerability was found in Balancer\u2019s liquidity pools. A suspected exploit involving nearly $70 million […]<\/p>\n","protected":false},"author":0,"featured_media":5310,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[100],"tags":[],"class_list":{"0":"post-5309","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-ethereum"},"acf":[],"_links":{"self":[{"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/posts\/5309","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/comments?post=5309"}],"version-history":[{"count":0,"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/posts\/5309\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/media\/5310"}],"wp:attachment":[{"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/media?parent=5309"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/categories?post=5309"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/digkrypton.com\/index.php\/wp-json\/wp\/v2\/tags?post=5309"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}History of attacks at Balancer<\/h2>\n
DeFi\u2019s security paradox<\/h2>\n