DeFi

when

Gnosis

Balancer

would

<h2 id="what-did-gnosis-do-after-the-balancer-hack">What Did Gnosis Do After the Balancer Hack?</h2> Operators of the Gnosis Chain carried out a hard fork this week to recover funds linked to the $116 million Balancer exploit disclosed in November. The action followed earlier emergency measures taken by validators and comes after weeks of coordination between node operators, developers, and affected protocols. In a post on X published Tuesday, Gnosis confirmed that the hard fork had been executed and that the affected funds were now “out of the hacker’s control.” While the project did not specify whether the recovery was partial or complete, the statement pointed to a material change in the status of assets previously considered lost. The hard fork was executed on Monday after a majority of validators had already adopted a soft fork in November. That earlier step was taken to contain the damage from the exploit, which targeted Balancer-managed contracts deployed on Gnosis Chain. 
<h3 id="investor-takeaway">Investor Takeaway</h3>
<div style="background: #f9f9f9; border-left: 4px solid #ff9900; padding: 12px; margin: 16px 0;">
 A chain-level intervention to recover funds is rare. The move shows how far ecosystems may go to protect users when exploits reach systemic scale.
</div>
<h2 id="how-did-the-balancer-exploit-unfold">How Did the Balancer Exploit Unfold?</h2> On Nov. 3, Balancer disclosed that its <a href="https://financefeeds.com/intentx-partners-with-orbs-for-enhanced-liquidity-solutions/" rel="noopener noreferrer nofollow">decentralized exchange and automated market maker</a> had been exploited, with losses exceeding $116 million. Onchain data later showed that the attacker moved <a href="https://financefeeds.com/metawin-announces-1-3-million-nft-holder-exclusive-giveaway/" rel="noopener noreferrer nofollow">millions of dollars’ worth of staked</a> ether into newly created wallets, complicating recovery efforts. Balancer later said that white <a href="https://financefeeds.com/ronin-hit-by-12-million-exploit-possibly-by-white-hat-hacker/" rel="noopener noreferrer nofollow">hat hackers</a> and internal rescue efforts managed to retrieve roughly $28 million of the stolen assets. Even so, the majority of funds appeared to remain inaccessible, prompting continued discussions among developers and infrastructure providers about extraordinary recovery measures. The exploit affected a subset of Balancer’s deployment, specifically V2 Composable Stable Pools. According to the project, the vulnerability was isolated to that pool design rather than the broader protocol. 
<h2 id="why-did-gnosis-choose-a-hard-fork">Why Did Gnosis Choose a Hard Fork?</h2> Hard forks are among the most extreme tools available to blockchain communities, as they alter the chain’s state and require broad validator coordination. In this case, Gnosis had already seen validator support for intervention through the earlier soft fork, creating a path toward a more decisive action. Philippe Schommers, head of infrastructure at Gnosis, addressed the recovery effort in a Dec. 12 forum post. He said discussions were still underway around how affected users would claim recovered funds and how contributors involved in the rescue effort might be recognized or compensated. “Right now we’re focused on enabling funds to be recovered by Christmas,” Schommers wrote. He added that once the <a href="https://financefeeds.com/from-wallets-to-ledgers-how-to-safely-move/" rel="noopener noreferrer nofollow">assets sit in a DAO-controlled wallet</a>, the community would determine the next steps. The emphasis on DAO custody suggests that, while the chain-level intervention moved assets away from the attacker, governance decisions around distribution and compensation remain unresolved. 
<h3 id="investor-takeaway">Investor Takeaway</h3>
<div style="background: #f9f9f9; border-left: 4px solid #ff9900; padding: 12px; margin: 16px 0;">
 Hard forks to reverse exploit outcomes introduce governance risk alongside security protection. Investors should weigh both when assessing protocol exposure.
</div>
<h2 id="what-does-this-say-about-defi-security">What Does This Say About DeFi Security?</h2> The Balancer exploit has reignited scrutiny around the limits of <a href="https://financefeeds.com/green-bitcoin-presale-raises-1m-as-bitcoin-approaches-its-ath/" rel="noopener noreferrer nofollow">smart contract audits</a>. Public records show that Balancer V2 underwent 11 audits conducted by four separate security firms. Despite that review history, the exploit still occurred. The incident adds to a growing list of attacks that bypass formal audits by targeting edge cases in contract logic rather than obvious coding errors. It also highlights how interconnected DeFi deployments can spread risk across chains, drawing infrastructure providers like Gnosis into incident response. For Gnosis, the fork sets a precedent that may influence future governance decisions when exploits affect critical infrastructure. For DeFi users, it reinforces that even well-audited systems carry tail risk, and that recovery paths can extend beyond the protocol itself. Whether the hard fork leads to full restitution remains to be seen. What is clear is that the response to the Balancer exploit has moved from protocol-level fixes to chain-level intervention, raising new questions about decentralization, governance, and responsibility in times of crisis.

Gnosis Executes Hard Fork to Recover Funds From $116M Balancer Hack

Table of Contents

FinanceFeeds

Other articles published on Dec 23, 2025

Join our free newsletter for daily crypto updates!