Prior exploit count
Balancer (v2 + v3)'s assessment for RD-F-077 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
3 smart-contract-level exploits: 2020-06-28 v1 STA deflationary token ~$500K; 2023-08-27 v2 Linear Pool rounding ~$2.1M; 2025-11-03 v2 ComposableStablePool rounding ~$128M. Plus 1 DNS/frontend incident 2023-09-20 ~$364K. Aggregate unrecovered smart-contract loss >$130M. Red: ≥2 exploits or any unrecovered loss.
Sources #
- URLhttps://medium.com/balancer-protocol/dns-security-incident-post-mortem-1b1feb735acaretrieved 2026-05-05
- https://rekt.news/balancer-rekt2retrieved 2026-05-05
- hacksdatabase/hacks/balancer-rekt.mdretrieved 2026-05-05
- https://rekt.news/balancer-rektretrieved 2026-05-05
- https://blog.1inch.io/balancer-hack-2020/retrieved 2026-05-05
Methodology #
Count the number of distinct incidents in the hack database affecting this protocol.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol balancer factor RD-F-077 score red collected_at 2026-05-05 12:41:36