Balancer Incident Analysis

On 3 November 2025 Balancer and forks Beets and Bex were exploited via a precision/rounding flaw in ComposableStablePool batch swaps that an attacker amplified with repeated tiny swaps to manipulate LP pricing and inflate internal balances; initial losses were ~ $130M (later reduced to ~ $96.4M after freezes and white-hat returns), with detailed attack steps, affected assets, wallets, laundering to Tornado Cash, and recovery actions documented.