Balancer V2 Pools Drained via Faulty Internal Withdrawal Logic
A precision error in Balancer V2's `manageUserBalance` function enabled unauthorized internal withdrawals, compromising $128M in cross-chain liquidity.
Balancer V2 Composable Pools Drained by Faulty Access Control Logic
A critical logic flaw in the `manageUserBalance` function enabled unauthorized internal withdrawals, resulting in a systemic, cross-chain vault drain.
Moonwell Lending Protocol Drained via Oracle Price Manipulation on Base Network
A transient oracle malfunction on Base allowed an attacker to over-collateralize minimal deposits, exposing lending markets to immediate, systemic insolvency risk.
Abracadabra Lending Protocol Drained Exploiting Deprecated Smart Contract Logic
A critical logic error in the cook function of deprecated cauldrons permitted unauthorized debt minting, bypassing core solvency checks.
Balancer V2 Pools Drained via Smart Contract Logic and Access Control Flaw
A precision rounding and access control flaw in the V2 Vault allowed invariant manipulation, causing a $128M capital loss across six chains.
Lending Protocol Drained via Oracle Price Feed Manipulation on Base
Critical oracle failure on Base allowed asset mispricing, enabling immediate, under-collateralized fund extraction from the lending pool.
Lending Protocol Drained via External Oracle Mispricing on Base Network
A faulty external price feed on a key collateral asset allowed for massive over-collateralization, leading to an unrecoverable debt cascade.
Berachain Halts Network, Hard Forks to Reverse BEX Balancer V2 Exploit
The inherited Balancer V2 access control flaw in BEX necessitated a chain halt and contentious hard fork, exposing the systemic risk of forked DeFi primitives.
Balancer V2 Boosted Pools Drained across Six Chains by Access Control Flaw
A critical logic error in V2's boosted pool access control allowed unauthorized withdrawal, compromising $128M and proving access control is the paramount smart contract risk.
