CyberHappenings logo

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Balancer V2 Composable Stable Pools Exploited in $120m DeFi Attack

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Balancer, a leading Ethereum-based decentralized finance (DeFi) protocol, experienced a cyber-attack on its Balancer V2 Composable Stable Pools, resulting in losses exceeding $120 million. The attack exploited a rounding down precision loss in the Balancer Vault’s calculations, allowing attackers to manipulate token prices. The incident highlights the vulnerability of DeFi protocols to sophisticated attacks despite extensive auditing and bug bounty programs. The attack occurred on November 3, 2025, and affected pools that were outside the pause window. Balancer has paused all affected pools and is working with security researchers to investigate the incident. The protocol has also warned users about a phishing campaign attempting to exploit the news of the attack.

Timeline

  1. 04.11.2025 11:45 1 articles · 6d ago

    Balancer V2 Composable Stable Pools Exploited in $120m Attack

    On November 3, 2025, Balancer's V2 Composable Stable Pools were targeted in a cyber-attack resulting in losses exceeding $120 million. The attack exploited a rounding down precision loss in the Balancer Vault’s calculations, allowing attackers to manipulate token prices. Balancer has paused all affected pools and is investigating the incident. A phishing campaign is exploiting the news of the attack to target Balancer users.

    Show sources

Information Snippets