Experts are debating whether the latest hack shakes confidence in DeFi or is just part of the inherent risks as investors chase higher yields.<\/p>\n
Veteran decentralized exchange (DEX) Balancer<\/a> v2 suffered a major hack on Monday, losing over $128 million and raising questions about whether users can trust even long-established, audited decentralized finance (DeFi) platforms.<\/p>\n On-chain data showed roughly $128 million in digital assets sent to the hacker\u2019s wallet across multiple blockchains, including 6,587 WETH (~$24.5 million), 6,851 osETH (~$26.9 million), and 4,260 wstETH (~$19.3 million), according to PeckShield<\/a>. This marks Balancer\u2019s largest hack to date.<\/p>\n The losses affected several networks, including Ethereum<\/a>, Polygon, Base, Arbitrum, Optimism, Sonic, and Berachain. Balancer\u2019s native token, BAL, fell 11.1% to $0.87, according to CoinGecko. Meanwhile, the protocol\u2019s total value locked (TVL) fell from $776 million to $406 million over the past 24 hours, according to DeFiLlama.<\/p>\n While Monday\u2019s Balancer exploit underscores that even established DeFi platforms remain vulnerable to attacks, experts are split on whether the breach has hurt overall confidence in DeFi.<\/p>\n Harry Donnelly, founder and CEO of Circuit, called Balancer\u2019s breach \u201ca serious warning\u201d for the DeFi ecosystem, noting that this was \u201cone of the most trusted names in the space\u201d and \u201can early pioneer with a culture of compliance, backed by rigorous audits and open disclosure.\u201d <\/p>\n At the same time, he cautioned that the same transparency that helped Balancer succeed also exposed it to exploitation. \u201cIf DeFi is to truly challenge traditional finance, it must stay ahead of bad actors through proactive resilience and response, not just reactive patching and freezing funds,” Donnelly said.<\/p>\n However, other industry experts emphasized that risk is an inherent part of DeFi investing and trust will likely remain the same.<\/p>\n \u201cSmart contracts and financial engineering are part of the risk profile of investing in DeFi. This is why smart contract audits are important,\u201d said Vladislav Ginzburg, founder and CEO of OneSource. \u201cI don\u2019t think the Balancer exploit represents a new paradigm and thus shouldn\u2019t change factors of trust or risk. The status quo is maintained.\u201d<\/p>\n Kadan Stadelmann, CTO of Komodo Platform, echoed the sentiment, arguing that hardcore DeFi users will not be deterred, but institutional investors might be. \u201cThese types of hacks in DeFi are what lead institutional investors and alternative asset investors toward Bitcoin-only strategies,\u201d he said.<\/p>\n The incident also raised questions on social media about the reliability of audits in DeFi. Suhail Kakar, a blockchain researcher, shared in a post on X<\/a> that Balancer v2 had undergone more than 10 audits and still suffered an exploit.<\/p>\n Specifically, Balancer v2 underwent multiple security audits by firms such as Certora, OpenZeppelin, and Trail of Bits between 2021 and 2023. <\/p>\n \u201cThis space needs to accept that ‘audited by X’ means almost nothing,\u201d Kakar said. \u201cCode is hard, DeFi is harder. It is unfortunate, but hope the team recovers.\u201d<\/p>\n Analysts say the hack stemmed from a flaw in Balancer v2\u2019s smart contracts that allowed unauthorized withdrawals. <\/p>\n Nicolai Sondergaard, Research Analyst at Nansen, said in comments shared with The Defiant that the attacker might have \u201cfaked a pile of fees into Balancer\u2019s fee account, then hit the withdraw button and cashed out WETH, basically turning fake credits into real money.”<\/p>\n This marks Balancer\u2019s third known security breach, following incidents in 2021 and 2023. The exploit also prompted Berachain, which has a TVL of $404 million, to temporarily halt its blockchain and execute an emergency hard fork to protect funds. <\/p>\n Berachain said<\/a> it is monitoring the situation closely and \u201cthe network will be operational shortly upon recovering all affected funds.\u201d Berachain\u2019s BERA token fell 10% to $1.62 following the incident. <\/p>\n Meanwhile, other networks responded differently. Polygon validators reportedly froze the hacker\u2019s transactions, while Sonic added functionality to freeze and zero out the attacker\u2019s S balances, one of Dragonfly Capital\u2019s managing partners pointed out on X<\/a>.<\/p>\n Balancer acknowledged the incident in two posts on X, noting that its engineering and security teams are investigating. \u201cWe\u2019ll share verified updates and next steps as soon as we have more information,\u201d the team wrote.<\/p>\n The team confirmed that the exploit affected only its v2 Composable Stable Pools and does not impact Balancer v3 or other pools. <\/p>\nExperts are Divided<\/h2>\n
Audits Mean \u201cAlmost Nothing\u201d<\/h2>\n
Swift Intervention<\/h2>\n
Balancer\u2019s Response<\/h2>\n