Balancer, one of the established protocols in the DeFi ecosystem, was rocked by suspicions of a major cyberattack in which approximately $70.9 million in assets were stolen. On-chain data indicates that the funds were transferred to a new wallet and the attacker began consolidating the assets. This raised concerns about possible money laundering and asset hiding attempts.
Hack Suspicion for Balancer
Affected assets include 6,850 osETH, 6,590 WETH, and 4,260 wstETH. Data indicates that the attack occurred on Balancer's second version (V2). Balancer has long held a prominent position in the decentralized finance world, a protocol with approximately $750 million in total value locked (TVL).
Following the attack, the price of Balancer's native token, BAL, fell by more than 5 percent. Market data shows that BAL has been declining significantly since its peak on Monday.
The Balancer team hasn't yet released an official statement, but this is the project's third major security breach in the last four years. Two separate attacks, in 2021 and 2023, also resulted in millions of dollars in losses.
According to data shared by the on-chain analytics platform Lookonchain, the attacker's wallet experienced a total outflow of approximately $70.6 million worth of assets. Ethereum-based assets appear to predominate among these funds. Experts suggest the attacker may have attempted to move funds through mixers or interchain bridges. This method complicates cryptocurrency tracing and is often used in money laundering attempts.
Different scenarios are being floated within the community regarding how the attack occurred. Some analysts suggest a smart contract vulnerability in Balancer V2 pools may have been exploited, while others believe the attack stemmed from an unrelated protocol management error. Security researchers are currently examining the on-chain activity in detail to trace the funds and identify the attack vector.
The community expects an immediate statement from the Balancer team and a potential restitution plan. The extent and impact of the attack will become clearer in the coming days, but this $70 million incident has already gone down as one of the largest security incidents of 2025 in the DeFi ecosystem.
