<p>Token of Power suffered an exploit on Tuesday that drained more than $1.5 million from its liquidity pool. On-chain firms Blockaid, PeckShield, and Cyvers flagged the incident in posts on X.</p>
<ul>
 <li>Token of Power lost 944.2 WETH, worth about $1.58 million, from its TOP/WETH Balancer V1 pool.</li>
 <li>Blockaid described the incident as a governance-takeover attack, while Cyvers traced the drain to the Balancer pool.</li>
 <li>PeckShield data showed the attacker later moved stolen funds into the Tornado Cash crypto mixer.</li>
</ul>
<p>The attack targeted the TOP/WETH Balancer V1 Pool and drained 944.2 WETH.</p>
<h2 class="wp-block-heading" id="top-token-exploit-hits-balancer-pool">TOP token exploit hits Balancer pool</h2>
<p>Token of Power, also known as TOP, is an <a href="https://crypto.news/circle-launches-cirbtc-on-ethereum-with-11-bitcoin-backing/" rel="noopener noreferrer nofollow">Ethereum-based ERC-20 token</a>. The project operates under a DAO called The Mask of Power. The project built TOP around collective ownership of a specific MetaMask NFT. Its token also supported liquidity for the project’s market activity.&nbsp;</p>
<p>Cyvers said the attacker drained funds from the TOP/WETH Balancer V1 Pool. The pool held TOP tokens and Wrapped Ethereum under a 50-50 structure. Wrapped Ethereum, or WETH, represents ETH in a token format used across DeFi.&nbsp;</p>
<p>The Balancer V1 pool functioned as an automated trading vault for both assets. Blockaid described the incident as a “governance-takeover attack” in its <a href="https://x.com/blockaid_/status/2064333344179917089?s=20" rel="noopener noreferrer nofollow">X post</a>. PeckShield and Cyvers also published alerts as the transaction activity became visible on-chain.</p>
<p>You might also like: <a href="https://crypto.news/humanity-protocol-says-compromised-admin-keys-led-to-36m-exploit/" rel="noopener noreferrer nofollow"> Humanity Protocol says compromised admin keys led to $36M exploit </a></p>
<h2 class="wp-block-heading" id="on-chain-firms-report-944-2-weth-loss">On-chain firms report 944.2 WETH loss</h2>
<p>On-chain intelligence firms said the attacker added a large number of TOP tokens into the pool. The attacker then swapped those tokens against the pool’s real WETH reserves. The exploit drained 944.2 WETH, worth about $1.58 million at the time.&nbsp;</p>
<figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p><a href="https://x.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#PeckShieldAlert</a> Token of Power ($TOP) has been exploited for $1.58M<br><br>The attacker deposited 945.1 <a href="https://x.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">$ETH</a> into <a href="https://x.com/hashtag/TornadoCash?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#TornadoCash</a>. <a href="https://t.co/hvPCqY7HBD" rel="noopener noreferrer nofollow">pic.twitter.com/hvPCqY7HBD</a></p>— PeckShield <a href="https://x.com/PeckShieldAlert/status/2064351240344228350?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 9, 2026</a>
  </blockquote>
 </div>
</figure>
<p>After the drain, the pool held heavily diluted TOP tokens. The incident left liquidity providers exposed to tokens with little market value. Further project details on recovery, compensation, or next steps remain unavailable.</p>
<p>PeckShield data showed the attacker later moved stolen funds into <a href="https://crypto.news/roman-storm-reacts-prosecutors-push-for-oct-retrial/" rel="noopener noreferrer nofollow">Tornado Cash</a>. Tornado Cash is a crypto mixer that can make tracing funds more difficult. The movement to Tornado Cash followed the initial drain from the Balancer pool. Security firms have not yet published a complete technical report on the incident.</p>
<p>You might also like: <a href="https://crypto.news/anthropic-launches-claude-fable-5-with-new-safeguards/" rel="noopener noreferrer nofollow"> FIFA names Kraken official crypto exchange supporter for 2026 World Cup </a></p>
<h2 class="wp-block-heading" id="exploit-follows-separate-humanity-protocol-breach">Exploit follows separate Humanity Protocol breach</h2>
<p>The Token of Power incident came one day after another reported DeFi security breach. As it was reported by crypto.news,&nbsp; <a href="https://crypto.news/humanity-protocol-price-plunges-83-as-30m-key-breach-widens/" rel="noopener noreferrer nofollow">Humanity Protocol</a> lost $36 million in user funds through an employee’s laptop breach. The two incidents affected different projects and used different reported attack paths.&nbsp;</p>
<p>However, both cases drew attention from blockchain security firms this week. The Humanity Protocol breach involved a digital identity project built on blockchain infrastructure. In contrast, the Token of Power exploit centered on a liquidity pool.</p>
<p>The TOP project has not yet released a full incident review in the provided details. More information about the attacker’s route and possible project response remains pending. Blockaid, PeckShield, and Cyvers continue to serve as the main cited sources for the incident. Their alerts identified the affected pool, the estimated loss, and the fund movement.</p>
<p>Read more: <a href="https://crypto.news/kristin-smith-pushes-senate-to-protect-crypto-developers-in-clarity-act/" rel="noopener noreferrer nofollow"> Kristin Smith pushes Senate to protect crypto developers in CLARITY Act </a></p>

Token of Power exploit drains $1.58M from Balancer pool

Table of Contents

crypto.news

Other articles published on Jun 9, 2026

Join our free newsletter for daily crypto updates!