Balancer avoids $4.1M loss after discovering new attack vector

Balancer prevented risks of loss for $4.1M after discovering a new attack vector. The platform is yet to give more details on the potential hack vulnerability.

Balancer prevented a relatively small loss of $4.1M not long after suffering a $116M drain due to flawed smart contract functions. Balancer has taken preventive measures, which is its usual mode of operation during past exploits.

The Balancer decentralized trading app discovered a flaw in its V2 meta-stable pools, initiating a white-hack recovery from vulnerable contracts.

In connection with the recent Balancer V2 stable-pool incident, a new value-extraction path was identified in V2 meta-stable pools. In coordination with @CertoraInc and @_SEAL_Org , Balancer team initiated a whitehat recovery around 7PM UTC and has secured ~$4.1M to controlled…

— Balancer (@Balancer) November 12, 2025

The user funds have been moved to safe storage, while the exploit risk has been removed. The affected pools are on the Ethereum mainnet, Optimism, and Arbitrum. Balancer V3 remains unaffected, as during the previous exploit.

Balancer has labeled the affected pools as deprecated, urging users to choose similar pools on V3.

At the same time, the Balancer exploiter continues to move funds, with some of the known wallets holding over $21M in ETH and other assets.

Balancer risks open white hat option to DeFi protocols

Balancer managed to prevent another loss by resorting to a white hat option. BitFinding had to initiate a last-resort white hack to salvage funds after the exploit.

Last week we helped @balancer recover part of the hack by intercepting exploits worth $1M. We identified and backrun the hacker in less than 5 seconds.

Full timeline below ⬇️

— BitFinding (@BitFinding) November 11, 2025

The speed of the operation last week allowed BitFinding to save around $1M of funds and move them to safe wallets.

Other sources point to an even bigger role for white hat researchers, who may have salvaged up to $20M in funds from Balancer.

Balancer works with lower liquidity

Following the hack, Balancer now holds a little over $322M in liquidity. At this level, Balancer has returned to activity levels not seen since before the 2021 bull market.

The loss of reputation also affected the BAL token, which now trades near yearly lows at $0.81. Despite the risks, Balancer remained a DeFi staple, working at a lower baseline.

The Balancer incident continues to spark fears of similar attacks on larger protocols. For now, most large-scale lending pools have not reported hacks, but many suspect other protocols contain similar smart contract errors, allowing actions that undermine the balance.

Some of the recent DeFi hacks found flaws in smart contracts that were omitted during multiple security audits, showing that even certified protocols are at risk.

Balancer has seen similar exploits of its V2 pools in 2023, which resulted in the closure of the affected vaults. However, the app retained its legacy technology, retaining the risks of further exploits. The Balancer exploit happened after a relatively calm month in October, where attacks against DeFi fell by 85%.