Balancer v2 Pool Exploit
Access-control oversight and rounding error in Balancer v2's invariant logic drained ~$120M across stable pools, the largest DeFi exploit of 2025.
Loss
120.0M
USD
Victim dossier
Balancer
Total losses
$122.1M
2 incidents
Balancer Boosted Pool Reentrancy
An attacker exploited rate-provider read-only reentrancy in Balancer boosted pools after a disclosure, draining ~$2.1M before users could fully exit liquidity.
Loss2.1MUSD