Balancer Suffers Major DeFi Exploit
Balancer experienced one of the largest breaches in the decentralized finance (DeFi) sector on Monday, with over $116 million in staked Ether and liquidity pool tokens siphoned from its v2 contracts and various forks. The decentralized exchange (DEX) and automated market maker (AMM) identified a possible flaw in the access controls of its smart contracts, which permitted attackers to withdraw funds directly from liquidity pools. The exploit initiated with a $70 million loss that escalated to $116 million, predominantly impacting liquid staking assets such as Lido’s wstETH and StakeWise’s osETH.
In an effort to recover the stolen assets, Balancer proposed a 20% bounty to any white hat hackers who could assist in reclaiming the funds. The team is collaborating with law enforcement and blockchain forensic experts to track down the perpetrators.
Community Concerns Over Balancer’s Security Measures
On Tuesday, Balancer faced criticism from community members who highlighted that the protocol had undergone numerous audits yet still fell victim to this hacking incident. “Balancer went through 10+ audits,” noted Suhail Kakar, a developer relations lead at the TAC blockchain. The breach indicated meticulous planning by an adept attacker. Conor Grogan, director at Coinbase, remarked that the hacker seemed to possess significant experience and potentially had funds linked to prior exploits.
Preliminary Analysis of the Attack
On Thursday, Balancer published an initial post-mortem report following the $116 million breach. The protocol confirmed it was targeted by a complex code exploit that affected its v2 Stable Pools and Composable Stable v5 pools.
Stream Finance Faces Significant Losses
In a separate incident impacting the DeFi market, the decentralized protocol Stream Finance announced a $93 million loss related to an external fund manager on Tuesday. This event caused stablecoins to lose their peg and liquidity freezes across the ecosystem due to the associated assets. Analysts noted that the collapse of Stream Finance triggered widespread repercussions throughout the DeFi space, with millions at risk in the protocol’s synthetic assets. Researchers from Yields and More revealed that over $284 million in loans and stablecoins were connected to Stream Finance’s xUSD, xBTC, and xETH. Multiple interconnected lending markets, including Euler, Solo, Morpho, and Gearbox, were identified as having exposure through stablecoin loops and vaults, raising contagion risks across the DeFi yields landscape.
Protocols such as TelosC and Elixir were highlighted as being significantly impacted, with Elixir’s exposure amounting to $68 million, constituting approximately 65% of its stablecoin reserves. On Friday, Elixir ceased support for its synthetic stablecoin deUSD, announcing that it had successfully processed redemptions for 80% of deUSD holders, which resulted in the token losing its dollar peg.
Introduction of DeFi Risk Ratings by RedStone
The modular oracle network RedStone has launched Credora, a risk ratings platform tailored for DeFi that incorporates real-time credit and collateral analytics into protocols like Morpho and Spark. RedStone aims to deliver dynamic risk assessments and default probability data through APIs, marking a shift towards data-driven transparency in light of recent market volatility that wiped out $20 billion in positions in October. This initiative aligns with a broader industry movement towards creating a lower-risk DeFi environment, where oracles, auditors, and analytics firms collaborate to evaluate the viability of yield and collateral systems. Other notable players such as Chainlink, S&P Global Ratings, and Hacken have indicated that the future of DeFi will rely on verifiable creditworthiness as opposed to speculative yield.
Formation of the Ethereum Protocol Advocacy Alliance
A coalition of prominent DeFi protocols has established the Ethereum Protocol Advocacy Alliance (EPAA) to enhance Ethereum’s policy representation in Washington. This alliance includes Aave, Uniswap, Lido, Curve, Spark, Aragon, and The Graph. The protocols aim to counterbalance the “outsized influence” of centralized crypto firms on U.S. regulations. The coalition intends to engage with policymakers directly to discuss the technical realities of decentralized infrastructure.
The EPAA, which receives backing from the Ethereum Foundation, plans to create educational resources, share technical knowledge, and coordinate messaging on matters affecting non-custodial systems and DeFi governance. The alliance seeks to ensure that on-chain protocols and not just centralized entities have a say in shaping the regulatory future of cryptocurrency.
DeFi and Web3 Gaming Activity in October
Despite an overall downturn in Web3 engagement, DeFi remained one of the most active sectors in October. According to a report by DappRadar, DeFi represented 18.4% of decentralized application (DApp) activity. The data revealed that the total value locked (TVL) in DeFi dropped by 6.3% to $221 billion, with a further decline of 12% in early November to $193 million. DappRadar attributed this trend to the $20 billion liquidation event in October and the subsequent fallout from the Stream Finance incident. Nevertheless, protocols like Raydium, Pump.fun, and Jupiter Exchange continued to experience robust usage.
Overview of the DeFi Market
Data from Cointelegraph Markets Pro and TradingView indicated that the majority of the 100 largest cryptocurrencies by market capitalization ended the week on a downward trend. The Stables Labs USDX (USDX) token plummeted by over 69% during the week, marking the steepest decline among tokens. It was followed by Paparazzi Token (PAPARAZZI), which experienced a 54% drop last week.
This concludes our summary of the most significant developments in DeFi for the week. Join us next Friday for further insights and updates in this rapidly evolving sector.
