The <button class="define-target" id="defi">defi</button> protocol Balancer suffered a major exploit that drained over $110&nbsp;million across several blockchains, including Ethereum, Polygon, Base, and Sonic. Attackers exploited faulty access control in the <code>manageUserBalance</code> function of Balancer's v2 <button class="define-target" id="smart-contract">smart contract</button>, enabling unauthorized internal withdrawals. The stolen tokens included 6,850&nbsp;osETH, 6,590&nbsp;wETH, and 4,260&nbsp;wstETH, later consolidated into new wallets likely for laundering.<p>The exploit also impacted <button class="define-target" id="fork">forked</button> protocols like Beets Finance, which lost around $3&nbsp;million. Balancer's BAL token dropped over 10% following the theft.</p><p>This was Balancer's third major security incident since 2020, despite prior <button class="define-target" id="audit">audits</button> by OpenZeppelin and Trail of Bits.</p>

"Balancer Hit by Apparent Exploit as $110M in Crypto Moves to New Wallets"

Balancer exploit #2

Balancer exploited for at least $110&nbsp;million

The Stream Finance <button class="define-target" id="defi">defi</button> <button class="define-target" id="yield-farming">yield</button> project announced that "an  external fund manager overseeing Stream funds disclosed the loss of approximately $93&nbsp;million in Stream fund assets." Stream announced that they were in the process of withdrawing remaining liquid assets, and had halted all deposits or withdrawals. They also announced they had retained a law firm to investigate the "incident".<p>The project didn't disclose who the fund manager was, or the circumstances in which the "loss" occurred.</p><p>The Staked Stream USD token <button class="define-target" id="peg">depegged</button> on November 3, and crashed further following the announcement.</p>

Event	Date	Amount More info	Recovered More info
Balancer exploit #2	November 3, 2025	$110,000,000
Stream Finance loss	November 4, 2025	$93,000,000