Not to be dramatic, but the Balancer exploit is a nightmare scenario. Balancer is a DeFi OG operating since 2020, among the top 3 most battle-tested DApps, and the exploit happened in Balancer V2 vaults (audited by multiple top firms that also audited most of DeFi). Not great.
Here's everything you need to know about the Balancer Hack: 1. The attack targeted Balancer's V2 vaults and liquidity pools, exploiting a vulnerability in smart contract interactions. Preliminary analysis from on-chain investigators points to a maliciously deployed contract that manipulated Vault calls during pool initialization. 2. Improper authorization and callback handling allowed the attacker to bypass safeguards. This enabled unauthorized swaps or balance manipulations across interconnected pools, draining assets in rapid succession (within minutes). 3. The exploiter initiated a series of transactions starting with a key Ethereum mainnet tx (0xd155207261712c35fa3d472ed1e51bfcd816e616dd4f517fa5959836f5b48569), which funneled assets to a new wallet under their control. Funds were then consolidated, likely for laundering via mixers or bridges. 4. Balancer's composable design where pools interact heavily amplified the flaw. Similar issues have plagued AMMs before, often tied to how they handle deflationary tokens or pool rebalancing. Full forensic details are still emerging, with auditors like PeckShield and Nansen involved. No evidence of a private key compromise; this was a pure smart contract exploit. Here's roughly the stolen assets: >Ethereum: ~$70M+ drained (main hit) >Base & Sonic: ~$7M combined >Other chains: ~$2M+ >Main stolen assets: WETH, wstETH, osETH, frxETH, rsETH, rETH — roughly $110–116M total. Here's what you should do If you're exposed: 1/ Withdraw Immediately: Pull funds from Balancer V2 pools if possibleavoid affected ones. 2/ Revoke Approvals: Use Revoke, DeBank, or Etherscan to cancel smart contract permissions for Balancer addresses. 3/ Monitor Wallets: Track via Etherscan or Dune Analytics for suspicious activity. 4/Stay Informed: Follow lookonchain, PeckShieldAlert, and Balancer for updates.
4,290
25
本頁面內容由第三方提供。除非另有說明,OKX 不是所引用文章的作者,也不對此類材料主張任何版權。該內容僅供參考,並不代表 OKX 觀點,不作為任何形式的認可,也不應被視為投資建議或購買或出售數字資產的招攬。在使用生成式人工智能提供摘要或其他信息的情況下,此類人工智能生成的內容可能不準確或不一致。請閱讀鏈接文章,瞭解更多詳情和信息。OKX 不對第三方網站上的內容負責。包含穩定幣、NFTs 等在內的數字資產涉及較高程度的風險,其價值可能會產生較大波動。請根據自身財務狀況,仔細考慮交易或持有數字資產是否適合您。