DeFi

Berachain

Million

Balancer

<p>The large-scale breach rippled across multiple blockchains – including Ethereum, Base, Optimism, Polygon, Sonic, and Berachain – prompting urgent responses from validators and developers.</p>
<p>Initial on-chain data revealed that attackers moved quickly to swap liquid staking tokens for ETH, indicating a coordinated operation rather than an isolated vulnerability. Security analysts reported the exploit originated from Balancer’s V2 vaults, where a flaw in smart contract permissions allowed hackers to manipulate internal transactions and bypass safety checks.</p>
<blockquote class="twitter-tweet">
 <p>We’re aware of a potential exploit impacting Balancer v2 pools.</p>
 <p>Our engineering and security teams are investigating with high priority.</p>
 <p>We’ll share verified updates and next steps as soon as we have more information.</p>
 <p>— Balancer (@Balancer) <a href="https://twitter.com/Balancer/status/1985283356582453588?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">November 3, 2025</a></p>
</blockquote>
<p></p>
<h2 id="a-vulnerability-hidden-in-plain-sight">A Vulnerability Hidden in Plain Sight</h2>
<p>Investigators believe the attackers used a malicious contract to intercept and redirect vault operations during pool creation, taking advantage of callback processes that weren’t properly restricted. This oversight enabled unauthorized token transfers between liquidity pools before balances could be updated, effectively draining funds across networks in a matter of minutes.</p>
<p>The exploit affected a wide range of tokens, including WETH, osETH, wstETH, sfrxETH, and rsETH – most of which are tied to Ethereum’s liquid staking ecosystem. According to blockchain trackers, one previously inactive whale wallet suddenly became active after the breach, withdrawing more than $7 million from Balancer shortly after the attack began.</p>
<h2 id="emergency-response-from-berachain-validators">Emergency Response from Berachain Validators</h2>
<p>Among the hardest hit was Berachain, where the Bera Foundation moved quickly to suspend the network and initiate an emergency hard fork. Validators agreed to pause the chain to prevent further exploitation while recovery procedures take place.</p>
<div class="read-more pb-3 pt-3 pt-md-2 px-3 my-4 border bg-light">
 <h5 class="text-uppercase border-bottom mb-3 pb-1 d-none d-md-block">READ MORE:</h5> <a href="https://coindoo.com/solana-price-outlook-price-drops-etf-flows-stay-strong-whats-next/" rel="noopener noreferrer nofollow">
  <div class="contentRight col-4">
   <span> <img src="https://coindoo.com/wp-content/uploads/2025/11/solana-image02395923.jpg"> </span>
  </div>
  <div class="contentLeft col-8">
   <h4 class="title mb-0">Solana Price Outlook: Price Drops, ETF Flows Stay Strong – What’s Next?</h4>
  </div> </a>
</div>
<p>Community figures <strong><a href="https://twitter.com/SmokeyTheBera/status/1985290004176789888" rel="noopener noreferrer nofollow">confirmed</a></strong> that several DeFi partners, including Ethena, had temporarily disabled lending and bridging operations connected to Balancer’s infrastructure. Exchange platforms were also contacted to blacklist suspicious addresses linked to the attackers in an attempt to limit the movement of stolen funds.</p>
<h2 id="market-shock-hits-bal-bera-and-staking-tokens">Market Shock Hits BAL, BERA, and Staking Tokens</h2>
<p>News of the exploit sent shockwaves through the market. Balancer’s native token, BAL, slid over 10% within hours, dropping below the $0.90 mark. BERA, the native token of Berachain, also fell by about 7%, while trading volumes in both assets spiked dramatically as users rushed to exit liquidity positions.</p>
<p>Tokens associated with liquid staking – such as LDO, RPL, and JTO – experienced sudden volatility amid fears of a broader liquidity crunch. Ethereum itself briefly dipped more than 4%, sliding to around $3,686 before stabilizing later in the day.</p>
<h2 id="defi-security-under-scrutiny-again">DeFi Security Under Scrutiny Again</h2>
<p>The Balancer exploit reignites debate around DeFi’s readiness for institutional-scale adoption. Despite years of audits and widespread use, vulnerabilities in complex smart contracts remain a systemic risk. Analysts note that the multi-chain scope of the attack underscores how interlinked DeFi protocols can amplify damage when one component fails.</p>
<p>As investigations continue, Balancer’s team and external auditors are working to trace the stolen funds and identify the perpetrators. For now, the hack stands as one of 2025’s largest and most technically advanced DeFi breaches – a reminder that even established protocols are not immune to evolving threats in the decentralized finance landscape.</p>
<p style="text-align: center;"><em><strong>The information provided in this article is for educational purposes only and does not constitute financial, investment, or trading advice. Coindoo.com does not endorse or recommend any specific investment strategy or <a rel="noopener noreferrer nofollow">cryptocurrency</a>. Always conduct your own research and consult with a licensed financial advisor before making any investment decisions.</strong></em></p>
<p>The post <a href="https://coindoo.com/balancer-breach-drains-129-million-in-one-of-defis-largest-cross-chain-exploits/" rel="noopener noreferrer nofollow">Balancer Breach Drains $129 Million in One of DeFi’s Largest Cross-Chain Exploits</a> appeared first on <a href="https://coindoo.com" rel="noopener noreferrer nofollow">Coindoo</a>.</p>

Balancer Breach Drains $129 Million in One of DeFi’s Largest Cross-Chain Exploits

Table of Contents

Coindoo.com

Other articles published on Nov 3, 2025

Join our free newsletter for daily crypto updates!