Balancer V2 Composable Pools Exploit Drains $128 Million across Multiple Chains
A logic flaw in the V2 `manageUserBalance` function allowed unauthorized internal withdrawals, demonstrating that extensive auditing cannot guarantee resilience against complex access control vulnerabilities.