Balancer V2 Hack

TOTAL LOST $238K
Low Frontend Attack ethereum

What happened

Balancer DEX faced a frontend vulnerability exploit on Sep 20, 2023, resulting in a loss of 238,000 USD.

Balancer, an AMM-based DEX operating on multiple chains, experienced a frontend vulnerability exploit on September 20, 2023. The attacker managed to transfer the stolen funds using the bridge between the Avalanche and Ethereum chains. They also distributed some of the stolen funds to several wallets.

One of the attacker-related addresses, 0xf998, received 1.04 AVAX from MEXC.

The attacker's address:

- https://cchain.explorer.avax.network/address/0x645710af…088d7e

- https://cchain.explorer.avax.network/address/0xF99825f5…0a29D6

Funds Holders as of Sep 20, 2023:

- https://cchain.explorer.avax.network/address/0x645710af…088d7e

- https://cchain.explorer.avax.network/address/0x1c14D9cF…69294f

Bridging Transactions:

- https://cchain.explorer.avax.network/tx/0x3bee94d9…91597c

- https://cchain.explorer.avax.network/tx/0x129938d7…a57e4c

Case & protocol details

Classification Protocol Logic / Exchange (DEX) / Frontend & Infrastructure
Protocol Type DEX
Official Website balancer.fi/
Protocol Twitter/X @Balancer

Security review history

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.