Balancer Protocol has once again drawn attention to the fragile state of decentralised finance after a major exploit drained over $70 million in digital assets. The attack, which occurred early today, targeted the platform’s liquidity pools and resulted in the loss of Wrapped Ether (WETH), Optimism Superfluid Ether (osETH), and Wrapped Staked Ether (wstETH).
According to on-chain analysis from Lookonchain, the exploit was detected around 7:48 AM UTC, when large, suspicious transfers moved approximately 6,587 WETH worth $24.46 million, 6,851 osETH valued at $26.86 million, and 4,260 wstETH totalling $19.27 million. The attacker successfully executed the transactions on block 23,717,404,120, siphoning assets from Balancer’s pools and sparking alarm across the DeFi landscape.
Balancer, an automated market maker (AMM) protocol that allows users to create liquidity pools with customised token ratios, appears to have fallen victim to a familiar weakness. While the platform’s flexibility is one of its key innovations, it has also exposed it to complex vulnerabilities. Security analysts suggest the breach may be linked to rate manipulation in boosted pools—a flaw that has plagued similar DeFi systems in the past.
Cybersecurity firm SlowMist had previously flagged comparable issues in its 2023 report, noting how attackers manipulated near 1:1 exchange ratios between stable assets such as USDC and bb-a-USDC to extract profits. This recurrence indicates that despite prior incidents and security audits, Balancer’s architecture may still harbour exploitable loopholes.
As of now, Balancer has not released an official statement confirming whether the losses stemmed from an external exploit or internal transfers, leaving users anxious about the safety of their remaining funds. Meanwhile, the incident adds to an already grim year for the crypto industry, which has seen more than $3 billion stolen in various hacks and scams. Major cases include the $91 million Bitcoin fraud uncovered in August and the $2.5 million Moby exploit in January.
The latest attack underscores a growing consensus within the DeFi sector—the urgent need for stronger, proactive security frameworks. Experts are calling for the integration of real-time monitoring, on-chain insurance, and improved risk assessment tools to prevent large-scale losses. For now, investors have been advised to withdraw liquidity from affected pools and stay alert for Balancer’s forthcoming investigation results.
