Leaderboard
908All-time rank
Balancer V1
Sep 9, 2026
$250K
Lost
$250K
Recovered
$0
Net loss
$250K
Unrecovered0% recovered
An attacker exploited a previously disclosed pricing vulnerability in deprecated Balancer V1 pools, extracting approximately $250,000. The attack was financed through flash loans and temporary collateral positions across three Aave V3 lending markets.
How the exploit worked
View reproducible PoCjoinswapPoolAmountOut rounding drain across 5 pools.
Lost: ~$110,839 for this DPI/USDC/WETH/WBTC pool (~$234K aggregate across all 5 vulnerable pools)
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Swap Logic Flaw
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Sep 9, 2026Exploit executed — $250K drained via swap logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)