# Balancer V2 Composable Pools Drained by Faulty Smart Contract Access Control ∞ Security

**Published:** 2025-11-11
**Categories:** Security

---

![A transparent, glass-like device featuring intricate internal blue geometric patterns and polished metallic elements is prominently displayed. The sophisticated object suggests a high-tech component, possibly a specialized module within a digital infrastructure](https://incrypthos.com/wp-content/uploads/2025/09/Transparent-Cryptographic-Module-Powering-Decentralized-Network-Operations.jpeg)

![A pristine white sphere, its lower half transitioning into a vibrant blue gradient, rests centrally amidst a formation of granular white and blue material, accompanied by a large translucent blue crystal shard. This entire arrangement floats on a dark, rippled water surface, creating a serene yet dynamic visual](https://incrypthos.com/wp-content/uploads/2025/09/decentralized-protocol-sphere-emerging-from-liquidity-pool-shard.jpeg)

## Briefing

The Balancer V2 protocol suffered a catastrophic security breach targeting its [Composable Stable Pools](https://incrypthos.com/news/composable-stable-pools/) across seven distinct blockchain networks. The primary consequence is the immediate loss of liquidity provider funds, causing a significant capital flight and raising critical questions about the security of complex, multi-chain DeFi architectures. The attack was executed by exploiting a faulty access control logic within a core contract function, resulting in a total loss of approximately $128 million.

![A close-up view presents two sophisticated, futuristic mechanical modules poised for connection, featuring transparent blue components revealing intricate internal mechanisms and glowing accents. The left unit displays a clear outer shell, exposing complex digital circuits, while the right unit, primarily opaque white, extends a translucent blue cylindrical connector towards it](https://incrypthos.com/wp-content/uploads/2025/09/modular-blockchain-interoperability-protocol-integration-mechanisms.jpeg)

## Context

The prevailing risk factor was the inherent complexity of Balancer’s V2 Vault architecture, which centralizes asset management logic for multiple pool types. Despite the system undergoing nine separate security audits, a subtle [precision error](https://incrypthos.com/news/precision-error/) within the manageUserBalance function was overlooked, representing a latent, high-severity vulnerability that existed within a critical, highly-audited component.

![A close-up view reveals a sleek, translucent device featuring a prominent metallic button and a subtle blue internal glow. The material appears to be a frosted polymer, with smooth, ergonomic contours](https://incrypthos.com/wp-content/uploads/2025/09/cryptographic-hardware-security-module-private-key-storage-interface.jpeg)

## Analysis

The compromise centered on a faulty [access control](https://incrypthos.com/news/access-control/) check within the manageUserBalance function of the V2 Vault smart contract. This logic flaw allowed an attacker to bypass permissioning by spoofing the op.sender parameter, effectively tricking the system into authorizing an internal withdrawal ( UserBalanceOpKind.WITHDRAW_INTERNAL ). By manipulating this check, the threat actor could execute unauthorized transfers from the pool’s internal balances, draining liquidity provider funds across every affected chain where the vulnerable pool type was deployed.

![The image displays a detailed close-up of a complex mechanical system, featuring transparent blue conduits and metallic components. Numerous small bubbles are visible within the translucent sections, indicating dynamic internal activity](https://incrypthos.com/wp-content/uploads/2025/09/Decentralized-Network-Protocol-Execution-Algorithmic-Data-Flow-Engine.jpeg)

## Parameters

- **Total Funds Drained** ∞ $128 Million ∞ The estimated aggregate loss from the [exploit](https://incrypthos.com/news/exploit/) across all affected chains.

- **[Vulnerability](https://incrypthos.com/news/vulnerability/) Type** ∞ Faulty Access Control ∞ The core logic error in the manageUserBalance function that allowed unauthorized internal operations.

- **Affected Chains** ∞ Seven ∞ The total number of distinct [blockchain networks](https://incrypthos.com/news/blockchain-networks/) where the vulnerable V2 pools were deployed and exploited.

- **[Recovery](https://incrypthos.com/news/recovery/) Bounty Offered** ∞ 20 Percent ∞ The maximum percentage of the stolen funds Balancer offered to the attacker for the return of the assets.

![A modern, rectangular device with a silver metallic chassis and a clear, blue-tinted top cover is presented against a plain white background. Visible through the transparent top, a complex internal mechanism featuring a polished circular platter, gears, and an articulating arm suggests a precision data processing or storage unit](https://incrypthos.com/wp-content/uploads/2025/09/corporate-blockchain-hardware-ledger-cryptographic-mechanism-secure-enclave.jpeg)

## Outlook

Immediate mitigation requires all protocols utilizing complex, composable pool logic to conduct an emergency review of their access control and balance management functions, prioritizing external [formal verification](https://incrypthos.com/news/formal-verification/). The second-order effect is a heightened contagion risk, as similar vault-based DeFi architectures must now be presumed vulnerable until proven otherwise. This incident will likely establish a new security best practice mandating independent, post-audit formal verification specifically targeting internal state manipulation and parameter validation across all critical withdrawal pathways.

![The image showcases a close-up of abstract, intertwined metallic silver and translucent blue forms, creating a sense of dynamic movement and intricate structure. Highly reflective surfaces capture light, emphasizing the smooth contours and the vibrant blue core elements](https://incrypthos.com/wp-content/uploads/2025/09/defi-protocol-interoperability-visualizing-blockchain-liquidity-flow-dynamics.jpeg)

## Verdict

**The Balancer V2 exploit is a definitive signal that even highly-audited, complex DeFi primitives remain susceptible to subtle logic flaws in core access control, demanding a systemic shift toward continuous, on-chain formal [verification](https://incrypthos.com/news/verification/).**

smart contract exploit, access control flaw, composable stable pools, precision rounding error, unauthorized withdrawal, multi-chain attack, liquidity pool drain, DeFi systemic risk, vault system vulnerability, internal balance manipulation, token balance spoofing, emergency recovery mode, white hat bounty, on-chain forensics, protocol governance action, cross-chain fund movement, smart contract audit failure, decentralized exchange risk, financial primitive security, arbitrary state change Signal Acquired from ∞ <a href="https://tradebrains.in/crypto/110-million-vanished-overnight-inside-balancers-biggest-defi-exploit-yet/?utm_source=incrypthos.com&utm_medium=referral&utm_campaign=noo-engine.com" target="_blank" rel="nofollow">tradebrains.in</a> 

## Micro Crypto News Feeds

<a href="https://incrypthos.com/news/composable-stable-pools/" class="glossary-item-box">

## composable stable pools 

Definition ∞ Composable stable pools are liquidity pools in decentralized finance that consist of stablecoins and allow for flexible integration with other protocols. </a><a href="https://incrypthos.com/news/precision-error/" class="glossary-item-box">

## precision error 

Definition ∞ Precision error is a deviation or inaccuracy that arises from the limitations of numerical representation or computational processes within a system. </a><a href="https://incrypthos.com/news/access-control/" class="glossary-item-box">

## access control 

Definition ∞ Access control dictates who or what can view or use resources within a digital system. </a><a href="https://incrypthos.com/news/exploit/" class="glossary-item-box">

## exploit 

Definition ∞ An exploit refers to the malicious utilization of a security flaw or vulnerability within a protocol, smart contract, or application to gain unauthorized access, steal assets, or disrupt operations. </a><a href="https://incrypthos.com/news/vulnerability/" class="glossary-item-box">

## vulnerability 

Definition ∞ A vulnerability refers to a flaw or weakness in a system, protocol, or smart contract that could be exploited by malicious actors to compromise its integrity, security, or functionality. </a><a href="https://incrypthos.com/news/blockchain-networks/" class="glossary-item-box">

## blockchain networks 

Definition ∞ Blockchain networks are distributed ledger systems where transactions are recorded chronologically and immutably across many computers. </a><a href="https://incrypthos.com/news/recovery/" class="glossary-item-box">

## recovery 

Definition ∞ Recovery, in a financial context, signifies the process by which an asset, market, or economy regains value after a period of decline. </a><a href="https://incrypthos.com/news/formal-verification/" class="glossary-item-box">

## formal verification 

Definition ∞ Formal verification is a mathematical technique used to prove the correctness of software or hardware systems. </a><a href="https://incrypthos.com/news/verification/" class="glossary-item-box">

## verification 

Definition ∞ Verification is the process of confirming the truth, accuracy, or validity of information or claims. </a>

**Tags:** [Composable Stable Pools](https://incrypthos.com/news/composable-stable-pools/), [Vault System Vulnerability](https://incrypthos.com/news/vault-system-vulnerability/), [Funds](https://incrypthos.com/news/funds/), [Liquidity](https://incrypthos.com/news/liquidity/), [Governance Action](https://incrypthos.com/news/governance-action/), [Recovery](https://incrypthos.com/news/recovery/)	

## Discover More

- 
### [Balancer V2 Pools Drained Exploiting BatchSwap Rounding Error](https://incrypthos.com/security/balancer-v2-pools-drained-exploiting-batchswap-rounding-error/)
![A sleek, silver metallic mechanism, featuring a central glowing blue core with intricate internal structures, is immersed within turbulent, translucent blue liquid. This visual metaphor represents a high-performance consensus mechanism at the heart of a distributed ledger technology network. The central unit embodies the robust cryptographic primitives securing digital asset transactions, while the surrounding fluid symbolizes the dynamic flow of on-chain data and network liquidity. This architecture suggests efficient transaction finality and scalable Web3 infrastructure.](https://incrypthos.com/wp-content/uploads/2025/09/Decentralized-Consensus-Mechanism-Core-Driving-Blockchain-Transaction-Finality.jpeg)

A critical rounding error in the `batchSwap` function allowed for precision manipulation, enabling the systematic draining of over $120 million from V2 liquidity vaults.

- 
### [Decentralized Key Generation Secures Threshold Signatures Eliminating Trusted Setup](https://incrypthos.com/research/decentralized-key-generation-secures-threshold-signatures-eliminating-trusted-setup/)
![A close-up view reveals a translucent, deep blue, organic-shaped substrate encasing metallic, cylindrical components. The foreground element, a precision-engineered secure element, features fine horizontal grooves and a central shaft, suggesting a cryptographic engine for private key management. This advanced hardware likely forms a trusted execution environment within a decentralized physical infrastructure network, enabling secure multi-party computation. Its design implies robust tamper-proof hardware for quantum-resistant cryptography, crucial for digital asset security and self-sovereign identity solutions.](https://incrypthos.com/wp-content/uploads/2025/09/secure-element-cryptographic-engine-decentralized-physical-infrastructure-substrate.jpeg)

Integrating Pedersen's DKG with BFT consensus eliminates the trusted dealer, securing multi-party systems and decentralized applications.

- 
### [Expander Signatures Enable Constant-Size Verification for Resource-Constrained Devices](https://incrypthos.com/research/expander-signatures-enable-constant-size-verification-for-resource-constrained-devices/)
![A close-up view reveals a sophisticated hardware wallet, encased within a transparent, impact-resistant shell. Visible through the casing is an intricate blue cryptographic module, suggesting advanced internal architecture designed for robust digital asset security. A brushed metal plate, likely a secure element for user authentication or transaction signing, is prominently featured. This design emphasizes tamper-proof cold storage for private keys, crucial for protecting cryptocurrency holdings on a distributed ledger. The transparent enclosure showcases the engineering behind this secure enclave, vital for decentralized finance operations.](https://incrypthos.com/wp-content/uploads/2025/09/hardware-wallet-secure-enclave-transparent-cryptographic-design.jpeg)

Expander Signatures, a novel cryptographic primitive, decouple heavy key generation from constant-size, lightweight verification, solving the key management burden for IoT devices on-chain.

- 
### [SwissBorg Solana Earn Program Suffers $41m Third-Party API Exploit](https://incrypthos.com/security/swissborg-solana-earn-program-suffers-41m-third-party-api-exploit/)
![Granular blue and white digital assets flow through transparent network channels, illustrating dynamic transaction throughput within a blockchain ecosystem. A clear spherical decentralized oracle, reflecting encrypted data, integrates off-chain information for smart contracts. Metallic validator mechanisms actively process block confirmations, holding a governance token. A data stream API extends over the white granular material, facilitating real-time price feeds. This visual metaphor depicts complex DeFi protocols and DLT infrastructure.](https://incrypthos.com/wp-content/uploads/2025/09/decentralized-ledger-data-stream-oracle-mechanisms-and-tokenomics.jpeg)

A compromised third-party API allowed unauthorized withdrawal authority, exposing on-chain controls and draining $41 million in SOL from a DeFi staking program.

- 
### [JPMorgan Settles Tokenized Treasuries on Public Blockchain](https://incrypthos.com/adoption/jpmorgan-settles-tokenized-treasuries-on-public-blockchain/)
![Intricate metallic components, resembling sophisticated mining rig or validator node hardware, are partially enveloped by a vibrant, textured, translucent blue substance. This visual metaphor illustrates advanced liquid cooling systems crucial for maintaining optimal hash rate and transaction processing efficiency within a decentralized network. The robust engineering signifies the foundational computational power supporting blockchain scalability and smart contract execution. The dynamic blue texture represents the fluid flow of digital assets or energy consumption within a consensus mechanism, emphasizing protocol integrity.](https://incrypthos.com/wp-content/uploads/2025/09/blockchain-computational-protocol-liquid-cooling-decentralized-infrastructure-visualized.jpeg)

This initiative establishes a secure, interoperable settlement layer for tokenized assets, enhancing capital efficiency and mitigating counterparty risk for institutional participants.

- 
### [FAVOR Tokens Minted via Validation Bypass on PulseChain and Ethereum](https://incrypthos.com/security/favor-tokens-minted-via-validation-bypass-on-pulsechain-and-ethereum/)
![A meticulously rendered silver-toned watch movement showcases intricate mechanical gears and ruby jewels against a dark backdrop. Dominating the center is a stylized, faceted Ethereum ETH logo, seamlessly integrated as the core consensus mechanism of this conceptual timepiece. This visual metaphor highlights the precision engineering of a decentralized network and the underlying protocol layer that powers digital assets and smart contracts, embodying the future of Web3 infrastructure and on-chain mechanics.](https://incrypthos.com/wp-content/uploads/2025/09/ethereum-protocol-decentralized-ledger-precision-engineering-digital-asset-timepiece.jpeg)

A critical validation flaw allowed an attacker to mint unsecured tokens, leveraging a fabricated liquidity provider to siphon significant value from the ecosystem.

- 
### [ALEX Protocol Suffers $16.18 Million Access Control Exploit](https://incrypthos.com/security/alex-protocol-suffers-16-18-million-access-control-exploit/)
![A sophisticated mechanical assembly is prominently displayed, centered on a hexagonal silver module with brushed metallic textures and precise bolt patterns. Reflective blue components and dark interconnecting wires emanate, symbolizing a robust distributed ledger network. This intricate design suggests a critical consensus mechanism or a secure smart contract execution environment. The composition evokes advanced blockchain infrastructure, potentially representing a high-performance validator node or a powerful tokenomics engine focused on digital asset security.](https://incrypthos.com/wp-content/uploads/2025/09/Algorithmic-Consensus-Protocol-Core-Digital-Asset-Vault.jpeg)

A critical access control flaw in ALEX Protocol's vault system allowed an attacker to bypass validation and drain $16.18 million in assets.

- 
### [Zero-Knowledge Proof of Training Secures Private Decentralized AI Consensus](https://incrypthos.com/research/zero-knowledge-proof-of-training-secures-private-decentralized-ai-consensus/)
![A close-up view reveals a sophisticated dark gray device with glowing blue circuit patterns etched onto its surface. At its core, a vibrant, frothy blue substance forms a complex, organic structure, resembling a dynamic liquidity pool within a decentralized autonomous organization DAO hardware unit. This advanced system suggests optimized hash rate processing, crucial for network validation in distributed ledger technology DLT environments, possibly indicating a next-generation consensus mechanism for high-performance blockchain operations. The intricate design hints at a novel approach to proof-of-stake architecture.](https://incrypthos.com/wp-content/uploads/2025/09/Quantum-Foam-Cooled-Blockchain-Node-for-High-Throughput-Consensus.jpeg)

ZKPoT, a novel zk-SNARK-based consensus, enables private, verifiable federated learning by proving model accuracy without exposing proprietary data.

- 
### [Nemo Protocol Developer Deployed Unaudited Code, Enabling $2.6m Exploit](https://incrypthos.com/security/nemo-protocol-developer-deployed-unaudited-code-enabling-2-6m-exploit/)
![Advanced semiconductor architecture is depicted, showing dark printed circuit board traces and numerous surface-mounted components. Prominent metallic heatsinks, with reflective blue and white geometric designs, dominate the foreground, signifying robust thermal management critical for high-performance computing. This hardware backbone is essential for blockchain node operations, facilitating cryptographic hashing and transaction validation. Such advanced chip architecture underpins Proof-of-Work mining rigs or Proof-of-Stake validator hardware, ensuring network security and data integrity within a decentralized ledger technology ecosystem. It represents the physical layer for smart contract execution and digital asset processing.](https://incrypthos.com/wp-content/uploads/2025/09/precision-engineered-hardware-driving-cryptographic-operations-for-blockchain-dlt.jpeg)

An unaudited code deployment enabled a flash loan and state manipulation attack, compromising Nemo Protocol and jeopardizing user assets.

**Tags:** [Access Control](https://incrypthos.com/news/access-control/), [Access Control Flaw](https://incrypthos.com/news/access-control-flaw/), [Arbitrary State Change](https://incrypthos.com/news/arbitrary-state-change/), [Audit Failure](https://incrypthos.com/news/audit-failure/), [Blockchain Networks](https://incrypthos.com/news/blockchain-networks/), [Composable Stable Pools](https://incrypthos.com/news/composable-stable-pools/), [Contract](https://incrypthos.com/news/contract/), [Cross-Chain Fund Movement](https://incrypthos.com/news/cross-chain-fund-movement/), [Decentralized Exchange](https://incrypthos.com/news/decentralized-exchange/), [Decentralized Exchange Risk](https://incrypthos.com/news/decentralized-exchange-risk/), [DeFi](https://incrypthos.com/news/defi/), [DeFi Systemic Risk](https://incrypthos.com/news/defi-systemic-risk/), [Emergency Recovery Mode](https://incrypthos.com/news/emergency-recovery-mode/), [Exchange Risk](https://incrypthos.com/news/exchange-risk/), [Exploit](https://incrypthos.com/news/exploit/), [Financial Primitive](https://incrypthos.com/news/financial-primitive/), [Financial Primitive Security](https://incrypthos.com/news/financial-primitive-security/), [Formal Verification](https://incrypthos.com/news/formal-verification/), [Fund Movement](https://incrypthos.com/news/fund-movement/), [Funds](https://incrypthos.com/news/funds/), [Governance Action](https://incrypthos.com/news/governance-action/), [Internal Balance](https://incrypthos.com/news/internal-balance/), [Internal Balance Manipulation](https://incrypthos.com/news/internal-balance-manipulation/), [Liquidity](https://incrypthos.com/news/liquidity/), [Liquidity Pool](https://incrypthos.com/news/liquidity-pool/), [Liquidity Pool Drain](https://incrypthos.com/news/liquidity-pool-drain/), [Multi-Chain](https://incrypthos.com/news/multi-chain/), [Multi-Chain Attack](https://incrypthos.com/news/multi-chain-attack/), [On-Chain](https://incrypthos.com/news/on-chain/), [On-Chain Forensics](https://incrypthos.com/news/on-chain-forensics/), [Precision Error](https://incrypthos.com/news/precision-error/), [Precision Rounding Error](https://incrypthos.com/news/precision-rounding-error/), [Protocol](https://incrypthos.com/news/protocol/), [Protocol Governance](https://incrypthos.com/news/protocol-governance/), [Protocol Governance Action](https://incrypthos.com/news/protocol-governance-action/), [Recovery](https://incrypthos.com/news/recovery/), [Recovery Mode](https://incrypthos.com/news/recovery-mode/), [Risk](https://incrypthos.com/news/risk/), [Rounding Error](https://incrypthos.com/news/rounding-error/), [Security](https://incrypthos.com/news/security/), [Smart Contract](https://incrypthos.com/news/smart-contract/), [Smart Contract Audit](https://incrypthos.com/news/smart-contract-audit/), [Smart Contract Audit Failure](https://incrypthos.com/news/smart-contract-audit-failure/), [Smart Contract Exploit](https://incrypthos.com/news/smart-contract-exploit/), [Stable Pools](https://incrypthos.com/news/stable-pools/), [Systemic Risk](https://incrypthos.com/news/systemic-risk/), [Token Balance Spoofing](https://incrypthos.com/news/token-balance-spoofing/), [Unauthorized Withdrawal](https://incrypthos.com/news/unauthorized-withdrawal/), [Vault System](https://incrypthos.com/news/vault-system/), [Vault System Vulnerability](https://incrypthos.com/news/vault-system-vulnerability/), [Verification](https://incrypthos.com/news/verification/), [Vulnerability](https://incrypthos.com/news/vulnerability/), [White Hat](https://incrypthos.com/news/white-hat/), [White-Hat Bounty](https://incrypthos.com/news/white-hat-bounty/)

---

## Raw Schema Data

```json
{
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
        {
            "@type": "ListItem",
            "position": 1,
            "name": "Home",
            "item": "https://incrypthos.com"
        },
        {
            "@type": "ListItem",
            "position": 2,
            "name": "Security",
            "item": "https://incrypthos.com/security/"
        },
        {
            "@type": "ListItem",
            "position": 3,
            "name": "Balancer V2 Composable Pools Drained by Faulty Smart Contract Access Control",
            "item": "https://incrypthos.com/security/balancer-v2-composable-pools-drained-by-faulty-smart-contract-access-control/"
        }
    ]
}
```

```json
{
    "@context": "https://schema.org",
    "@type": "Organization",
    "@id": "http://incrypthos.com#organization",
    "name": "Incrypthos",
    "url": "http://incrypthos.com",
    "description": "Incrypthos Crypto News Engine is a proprietary language model designed specifically for the cryptocurrency domain. It operates 24/7 to ingest, analyze, and synthesize information from hundreds of global sources. Its core function is to discern the signal from the noise, reconstructing complex news and research into structured, objective summaries. Every article is generated by this engine and includes a direct link to the original source to ensure full transparency.",
    "email": "info@incrypthos.com",
    "logo": {
        "@type": "ImageObject",
        "url": "https://incrypthos.com/wp-content/uploads/2025/09/Incrypthos.svg"
    }
}
```

```json
{
    "@context": "https://schema.org",
    "@type": "Article",
    "mainEntityOfPage": {
        "@type": "WebPage",
        "@id": "https://incrypthos.com/security/balancer-v2-composable-pools-drained-by-faulty-smart-contract-access-control/"
    },
    "headline": "Balancer V2 Composable Pools Drained by Faulty Smart Contract Access Control \u221e Security",
    "description": "A precision error in Balancer's V2 pool logic enabled unauthorized internal withdrawals, compromising $128M and exposing systemic DeFi composability risk. \u221e Security",
    "url": "https://incrypthos.com/security/balancer-v2-composable-pools-drained-by-faulty-smart-contract-access-control/",
    "datePublished": "2025-11-11T16:48:16+00:00",
    "dateModified": "2025-11-11T16:48:24+00:00",
    "articleSection": [
        "Security"
    ],
    "author": {
        "@id": "http://incrypthos.com#organization"
    },
    "publisher": {
        "@id": "http://incrypthos.com#organization"
    },
    "image": {
        "@type": "ImageObject",
        "url": "https://incrypthos.com/wp-content/uploads/2025/09/blockchain-protocol-internal-mechanisms-tokenized-asset-transparency.jpeg",
        "caption": "Two circular metallic objects, positioned with one slightly behind the other, showcase transparent blue sections revealing intricate internal mechanical movements. Visible components include precision gears, ruby jewel bearings, and a balance wheel, all encased within a polished silver-toned frame, resting on a light grey surface. This design embodies the complex yet transparent protocol architecture inherent in decentralized networks. It symbolizes the precision of cryptographic functions and the meticulous execution of smart contract logic within distributed ledger technology. The visible mechanisms underscore the engineered security of digital assets and the foundational consensus mechanisms that ensure on-chain transparency and immutability for Web3 infrastructure. Such robust internal workings are critical for the reliability of institutional-grade digital assets and the future of tokenized securities, emphasizing the vital role of underlying mechanics in the digital economy. It further suggests the internal auditability and verifiability crucial for corporate crypto applications."
    },
    "keywords": [
        "Access Control",
        "Access Control Flaw",
        "Arbitrary State Change",
        "Audit Failure",
        "Blockchain Networks",
        "Composable Stable Pools",
        "Contract",
        "Cross-Chain Fund Movement",
        "Decentralized Exchange",
        "Decentralized Exchange Risk",
        "DeFi",
        "DeFi Systemic Risk",
        "Emergency Recovery Mode",
        "Exchange Risk",
        "Exploit",
        "Financial Primitive",
        "Financial Primitive Security",
        "Formal Verification",
        "Fund Movement",
        "Funds",
        "Governance Action",
        "Internal Balance",
        "Internal Balance Manipulation",
        "Liquidity",
        "Liquidity Pool",
        "Liquidity Pool Drain",
        "Multi-Chain",
        "Multi-Chain Attack",
        "On-Chain",
        "On-Chain Forensics",
        "Precision Error",
        "Precision Rounding Error",
        "Protocol",
        "Protocol Governance",
        "Protocol Governance Action",
        "Recovery",
        "Recovery Mode",
        "Risk",
        "Rounding Error",
        "Security",
        "Smart Contract",
        "Smart Contract Audit",
        "Smart Contract Audit Failure",
        "Smart Contract Exploit",
        "Stable Pools",
        "Systemic Risk",
        "Token Balance Spoofing",
        "Unauthorized Withdrawal",
        "Vault System",
        "Vault System Vulnerability",
        "Verification",
        "Vulnerability",
        "White Hat",
        "White-Hat Bounty"
    ]
}
```


---

**Original URL:** https://incrypthos.com/security/balancer-v2-composable-pools-drained-by-faulty-smart-contract-access-control/
