Decentralized finance (DeFi) protocol Balancer is under scrutiny after on-chain data revealed what appears to be a large-scale exploit draining over $116 million in crypto assets from its vaults.
UPDATE: The attack is ongoing. The estimated loss is ~$88M on multiple chains https://t.co/tu7d5SKYy7
— PeckShieldAlert (@PeckShieldAlert) November 3, 2025
Blockchain monitoring service Lookonchain was among the first to flag the suspicious activity, noting substantial outflows from Balancer’s main address “0xBA1...BF2C8.” Transaction logs on Etherscan show the movement of roughly 6,587 WETH (worth about $24.5 million), 6,851 osETH (around $26.9 million), and 4,260 wstETH (approximately $19.3 million), suggesting an unauthorized withdrawal rather than a planned migration.
While the Balancer team has not yet issued an official statement, blockchain analytics firms including Nansen have marked the transactions as suspicious. Early technical assessments indicate a potential smart contract vulnerability as the cause.
.@Balancer potentially exploited.
— Nansen 🧭 (@nansen_ai) November 3, 2025
$70.9M moved to a fresh wallet. Tokens moved:
- 6.85K $OSETH
- 6.59K $WETH
- 4.26K $wSTETH pic.twitter.com/kk1hnjmcIW
Mikko Ohtamaa, CEO and co-founder of Trading Strategy, shared in a post on X (formerly Twitter) that a faulty contract verification could have enabled the exploit. He added that not all versions of Balancer appear to be affected but warned that losses could exceed $100 million if older V2 forks share the same weakness.
An OG Ethereum DEX Balancer got rekt for ~$70M.
— Mikko Ohtamaa (@moo9000) November 3, 2025
GM.
Root cause (kudos to Defimon Signals) was a faulty check.
Still not clear what Balancer versions are affected, but not all of them. https://t.co/eVfRugvZlO pic.twitter.com/Ao6CkU0BFk
According to PeckShield, a leading blockchain security firm, the exploit may still be ongoing across multiple networks where Balancer operates. If confirmed, this would make it one of the largest DeFi security breaches of the year.
Balancer, launched in 2020, functions as a decentralized exchange (DEX) and automated portfolio manager on the Ethereum blockchain, allowing users to trade and provide liquidity through self-balancing pools. As of this week, the platform held more than $350 million in total value locked (TVL), according to data.
Absolutely insane — the total stolen funds from the Balancer exploit have now surged to $116.6M. 💀https://t.co/mZSf2EK7K5 pic.twitter.com/yZIC6H9NB3
— Lookonchain (@lookonchain) November 3, 2025
Following news of the potential breach, Balancer’s native token BAL dropped by over 4%, reflecting investor uncertainty as the investigation continues.