Advisory

DeFI Exchange Balancer reports Critical Vulnerability, asks users to withdraw funds from vulnerable pools

Take action: If you have funds in cryptocurrency and are using Balancer exchange, it's time to start withdrawing your funds. Check the Balancer project and the linked Github for the vulnerable liquidity pools.


Learn More

The decentralized exchange platform Balancer has disclosed a critical vulnerability that could potentially impact certain liquidity pools within its ecosystem. The vulnerability has been identified as posing a risk to a portion of the platform's total value locked (TVL), exposing approximately $33 million.

Despite the mitigation of the threat in some pools, the Balancer team has advised users to take precautionary measures by withdrawing their assets from the affected pools.

To ensure user safety, the project's interface has been updated to notify users of the need to withdraw their funds from any pools that might be affected by the vulnerability. Those interested can find a list of the vulnerable pools spanning eight different blockchains on Github.

Balancer claims that there have been no reported incidents of fund loss attributable to the vulnerability.

A comprehensive review of the vulnerability, referred to as a "post-mortem," is anticipated and will be shared in due course, as indicated in the forum post by the Balancer team.

Update - as of 23rd August 2023 although Balancer estimated that $33 million were at risk, the users have been pulling funds off the platform of much higher value. Data from Total Value Locked aggregator DeFiLlama shows that over $200 million has been withdrawn from Balancer V2 since the announcement of the vulnerability.

DeFI Exchange Balancer reports Critical Vulnerability, asks users to withdraw funds from vulnerable pools