Balancer Exploited for $128 Million Across Ethereum Chains as Berachain Halts Network-awdailynews

webadmin

2025-11-04

Balancer Exploited for $128 Million Across Ethereum Chains as Berachain Halts Network

Crypto automated market maker Balancer suffered a major exploit early Monday that resulted in an estimated $128 million worth of digital assets being stolen across multiple blockchains. As a result, emerging network Berachain has forcefully halted its blockchain and is attempting a hard fork to resolve the issue.

Balancer was offering its services across multiple chains—including Ethereum, Arbitrum, and Base—and all of those that used Balancer V2 were vulnerable to the attack. On top of this, many protocols have used its codebase to build their own products, which also suffer from the same vulnerability.

The exploit likely came as the result of a “tiny precision/rounding error” found in Balancer V2 liquidity pools, on-chain analytics firm Nansen told Decrypt. The attacker pushed the pools towards that rounding error via multiple swaps within a single transaction. That led to the Balancer Pool Token, which represents ownership in Balancer liquidity pools, being undervalued by the liquidity pool.

“With the BPT price depressed, the attacker swapped into or minted BPT at that deflated value. They immediately converted those (underpriced) BPT back into underlying assets and then into ETH, pocketing the difference,” Nansen Research Analyst Nicolai Sondergaard told Decrypt.

Security experts Cyvers and PeckShield both estimate the total losses to be worth approximately $128 million. Nansen estimated the figure to be closer to $100 million, a figure that is dropping as token prices decline amid a broader market plunge. The stolen funds were then sent through several different addresses and swapped on decentralized exchanges.

Balancer has acknowledged the exploit and confirmed that the issue is isolated to Balancer V2 Composable Stable Pools specifically—meaning V3 pools remain unaffected. The project is now working with “leading security researchers” to create a full postmortem on the incident. Balancer’s BAL token has dropped more than 11% on the day to a $56 million market capitalization, according to CoinGecko.

“[It’s] likely the worst is behind at this point, as it does not seem like the exploiter is withdrawing any more funds,” Sondergaard said.

As a result of the attack, Berachain validators coordinated to halt the blockchain, with plans to perform an emergency hard fork to roll back the chain to its state before the exploit.

This is because Berachain’s native decentralized exchange is built upon the same vulnerable codebase as Balancer V2, Cyvers told Decrypt. That explains why Berachain was hit so hard, with an estimated $12.86 million in losses.