Beets Hack
What happened
On November 3, 2025, Beets Fi protocol on Sonic Labs suffered an exploit targeting Balancer V2 pools. Sonic's security team responded by deploying an emergency safety mechanism that froze two suspected attacker wallets, with $3M worth of USD on their balance. Two Balancer V2 pools (stS/S and stS/wOS) were impacted, while V3 pools and the stS LST token remained unaffected.
The attack targeted two specific Balancer V2 pools on the Beets DEX: the stS/S pool and the stS/wOS pool. The exploit appears related to the broader Balancer V2 vulnerability disclosed around the same timeframe affecting multiple chains. Upon detection of suspicious activity, Sonic Labs' security team took swift action by deploying a previously planned safety mechanism ahead of its scheduled network upgrade, enabling them to freeze suspected attacker wallets and prevent further fund movement.
The stS liquid staking token (LST) continued operating normally with minting, staking, and unstaking functions unaffected. All Beets V3 pools remained secure and operational throughout the incident. The rapid coordination between Beets and Sonic Labs allowed for containment before the attacker could extract funds from the Sonic network.
Case & protocol details
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
- report Report x.com
- report Report x.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.