🚨 Balancer potentially exploited!
$70.9M moved to a fresh wallet. Tokens moved:
- 6.85K $OSETH
- 6.59K $WETH
- 4.26K $wSTETH
@atoms_res @nansen_ai manageUserBalance has a faulty access check
In _validateUserBalanceOp it checks msg.sender against user supplied op.sender. It allows to execute UserBalanceOpKind.WITHDRAW_INTERNAL (kind = 1)
Source: @DefimonAlerts
@atoms_res @nansen_ai @DefimonAlerts It’s like 120-130mm+ atm
This seems to be the actual exploit txn, btw, the one from X is just the withdrawal.
@atoms_res @nansen_ai @DefimonAlerts these are the last txs before hack started on EURe on Gnosis Balancer v2 vault:
the EURe/SDAI pool is emptied:
@atoms_res @nansen_ai @DefimonAlerts Looks like oracle manipulation?..
@atoms_res @nansen_ai @DefimonAlerts . @Polymarket has a market running for 100m+ exploit before 2026…
@atoms_res @nansen_ai @DefimonAlerts @Polymarket The project team commented on the incident:
«We’re aware of a potential exploit impacting Balancer v2 pools.
Our engineering and security teams are investigating with high priority.
We’ll share verified updates and next steps as soon as we have more information.»
@atoms_res @nansen_ai @DefimonAlerts @Polymarket 128m$ damage until now, still no more details.
8,573
46
本页面内容由第三方提供。除非另有说明，欧易不是所引用文章的作者，也不对此类材料主张任何版权。该内容仅供参考，并不代表欧易观点，不作为任何形式的认可，也不应被视为投资建议或购买或出售数字资产的招揽。在使用生成式人工智能提供摘要或其他信息的情况下，此类人工智能生成的内容可能不准确或不一致。请阅读链接文章，了解更多详情和信息。欧易不对第三方网站上的内容负责。包含稳定币、NFTs 等在内的数字资产涉及较高程度的风险，其价值可能会产生较大波动。请根据自身财务状况，仔细考虑交易或持有数字资产是否适合您。