Balancer V2 Hack
What happened
Balancer DEX faced a frontend vulnerability exploit on Sep 20, 2023, resulting in a loss of 238,000 USD.
Balancer, an AMM-based DEX operating on multiple chains, experienced a frontend vulnerability exploit on September 20, 2023. The attacker managed to transfer the stolen funds using the bridge between the Avalanche and Ethereum chains. They also distributed some of the stolen funds to several wallets.
One of the attacker-related addresses, 0xf998, received 1.04 AVAX from MEXC.
The attacker's address:
- https://cchain.explorer.avax.network/address/0x645710af…088d7e
- https://cchain.explorer.avax.network/address/0xF99825f5…0a29D6
Funds Holders as of Sep 20, 2023:
- https://cchain.explorer.avax.network/address/0x645710af…088d7e
- https://cchain.explorer.avax.network/address/0x1c14D9cF…69294f
Bridging Transactions:
- https://cchain.explorer.avax.network/tx/0x3bee94d9…91597c
- https://cchain.explorer.avax.network/tx/0x129938d7…a57e4c
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report twitter.com
- analysis Web Archive archive.ph
- analysis Website reference twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.