- Balancer suffered a major security attack affecting V2 Composable Stable Pools, with over $128M initially drained.
- StakeWise recovered $19.3M in osETH, reducing hackers’ loot to about $98M.
- Hackers converted over half of the stolen funds to ETH and used Tornado Cash to launder assets.
A decentralized finance platform named Balancer had a serious security attack. This resulted in over $128 million lost in its V2 Composable Stable Pools. The attack, which occurred on Monday, shocked the entire DeFi community as it impacted multiple blockchains simultaneously.
Blockchain security firm PeckShieldAlert confirmed that there had been a draining of large amounts of WETH, osETH, and wstETH in liquidity pools as part of a well-orchestrated attack that had continued for a number of hours.
Balancer Recovery Slows Hacker Operations
Although it is a serious concern, there seems to have been a breakthrough. On-chain intel service provider EmberCN informed that liquid staking protocol StakeWise successfully reclaimed 5,041 osETH, equivalent to approximately $19.3 million, through the contract call method.
This resulted in a decrease amount of loot for the hackers to $98 million. As per EmberCN, more than 50% of the stolen amount is now converted to Ethereum to facilitate easy money laundering. It could be noted that the hackers first stole $117 million.
This exploit was first identified by analytics firm Nansen, which noted fishy transactions to a newly formed address. Shortly thereafter, service firm Cyvers Alerts verified that the exploit actor had begun utilizing the services of Tornado Cash, a common practice to launder funds.
Further investigations carried out by Lookonchain and the DeFi community on X identified that the attacker had leveraged vulnerabilities in Balancer’s V2 contracts to facilitate quick and unauthorized money flows between linked pools before mixing the funds to cover their tracks.
Also Read | Trump Denies Binance Pardon: Is It A New Era for Crypto Regulation In 2025?
Balancer Responds as Users Take Action
Balancer’s team had confirmed this attack on X, saying that their engineering and security teams were looking into it with the highest priority. Nonetheless, they have assured users that this issue does not impact Balancer V3 or other pools. It only affects V2 Composable Stable Pools.
This attack led users to take quick actions to secure their funds. This includes one of the whales’ wallets that had not been active for three whole years. It was immediately withdrawn 6.5 million dollars.
This is particularly evident in the current challenges faced by decentralized finance. Even reputable platforms with established credibility can fall victim to vulnerabilities. Since there is still an ongoing investigation with assets still tracked, users can only wait to be updated on plans to retrieve their funds.
With the increasing popularity of the DeFi market, smart contract auditing services and real-time threat detection have become even more critical.
Also Read | Filecoin Price Prediction 2025: Expert Targets $3.52 After 12% Drop
