DeFi Protocol Balancer Faces Another Security Breach After Being Exploited for $2M a Month Ago

Balancer, the Ethereum-based decentralized finance (DeFi) protocol, is facing a security breach, marking the second such incident in less than a month. 

The platform issued a warning to its users after detecting an attack on its frontend, urging them to refrain from interacting with the Balancer user interface until further notice.

The breach was revealed to the community on September 19th, around 11:49 pm UTC. 

The balancer frontend is under an attack. The issue is currently under investigation. Please do NOT interact with the balancer UI until further notice!

— Balancer (@Balancer) September 19, 2023

$238,000 Worth of Crypto Stolen 

While the full extent of the attack is still under investigation, it has raised concerns among users and the broader DeFi community. 

Blockchain security firms, including PeckShield, and blockchain analyst ZachXBT, estimate that approximately $238,000 in cryptocurrency has been siphoned off.

Stolen funds are being directed to this address

0x645710Af050E26bB96e295bdfB75B4a878088d7E

~$238k stolen so far pic.twitter.com/rwMybBaLoA

— ZachXBT (@zachxbt) September 20, 2023

The attack’s modus operandi appears to involve hijacking the Balancer domain, Balancer.fi. 

Users who accessed the compromised website were prompted to approve a malicious contract, unknowingly facilitating the draining of their wallets. 

Reports from affected users indicate that this deceptive approach has been quite effective.

Despite the ongoing investigation, Balancer contributor Cosme Fulanito has provided some assurance that the protocol’s vault remains “100% fine.” 

This suggests that user funds held in the protocol may not have been affected, though official confirmation from the company is still pending.

Balancer Protocol Exploited for $2 Million a Month Ago

This security breach comes as a disconcerting sequel to Balancer’s recent vulnerability scare in August, where the protocol warned users of a critical vulnerability. 

Just days after the initial warning, the platform suffered an estimated $2 million exploit linked to the vulnerability. 

Although mitigation measures had been implemented to reduce risks, affected liquidity pools could not be paused, leading to the urgent withdrawal advisory for users.

The Balancer team has learned from the previous incident and acted swiftly to investigate and contain the breach. 

Users are now advised to exercise extreme caution, refraining from any interaction with the platform’s user interface until the situation is resolved, highlighting the constant battle for security and trust within the DeFi space.