Overview
- Estimated losses range from roughly $100 million to $129 million as funds were siphoned across Ethereum, Arbitrum, Base, Sonic, Optimism, Polygon and Berachain.
- Berachain validators purposefully halted the network to execute an emergency hard fork intended to address Balancer‑related drains and pursue recovery.
- Security teams report the root cause centers on a V2 vault vulnerability, with competing analyses pointing to a precision rounding flaw or improper authorization and callback handling.
- HashDit identified attacker‑controlled wallets on Ethereum holding over $117 million in WETH, osETH and wstETH, with the primary address initially funded via Tornado Cash as noted by Conor Grogan.
- DeFiLlama data shows Balancer’s TVL plunged by about 46% as users withdrew funds, while forks and integrators such as Beefy and Beets.fi paused or reviewed products and investigators continued on‑chain tracing.