DeFi protocol Balancer frontend is under assault, $238K crypto stolen

nestorsauer8 20. September 2023 0

Balancer, an Ethereum-based decentralized finance protocol, warns customers to steer clear of its web site after an assault on its frontend.

The platform notified its neighborhood on Sept. 19 at 11:49 pm UTC, urging customers to not work together with the  Balancer consumer interface till additional discover.

Balancer mentioned the main points of the assault are under investigation. The agency hasn’t formally commented on whether or not consumer funds have been affected, however Balancer contributor Cosme Fulanito has reportedly confirmed that Balancer’s vault stays “100% positive.“

However, blockchain safety companies, together with PeckShield and blockchain analyst ZachXBT, estimated that at the least $238,000 in crypto had been stolen on the time of writing.

Some customers have been reporting that when interacting with the web site, they’re being prompted to approve a malicious contract that drains customers’ wallets.

One trade pundit explained what different customers have reportedly skilled:

“If you open the website it asks you to change the chain, where you hold the most amount of money. After that scam transaction is sent, after confirmation money are gone. Don’t open the website!!!”

Users trying to entry the Balancer web site is met with a warning signal:

Balancer’s web site as of Sept. 20 at 1:04 am UTC. Source: Balancer

Related: Breaking: ‘All funds are at risk’ — Steadefi exploited in ongoing attack

This is the second attack on Balancer in less than a month after it warned of a critical vulnerability on Aug. 22, suffering an estimated $2 million exploit related to the vulnerability just days later.

“Balancer is aware of an exploit related to the vulnerability below,” the protocol’s workforce posted on X (previously Twitter) on Aug. 27, including that whereas mitigation measures taken in latest days had drastically lowered dangers, affected swimming pools couldn’t be paused.

“To prevent further exploits, users must withdraw from affected LPs,” it suggested. 

Magazine: Recursive inscriptions: Bitcoin ‘supercomputer’ and BTC DeFi coming soon