Chronic-exploit flag (≥3 incidents)
Balancer (v2 + v3)'s assessment for RD-F-078 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
4 distinct incidents total (2020 v1, 2023-08 v2 SC, 2023-09 DNS, 2025-11 v2 SC); 3 smart-contract-level incidents alone meet ≥3 threshold. CHRONIC badge per PD-022 does NOT trigger: the 2023 and 2025 incidents have distinct root-cause clusters (different functions, pool types, vectors) and are 26 months apart. No same-root-cause pair in 24 months.
Sources #
- URLhttps://rekt.news/balancer-rekt2retrieved 2026-05-05
- https://rekt.news/balancer-rektretrieved 2026-05-05
- https://blog.1inch.io/balancer-hack-2020/retrieved 2026-05-05
Methodology #
Determine whether the protocol has ≥3 distinct incidents in the hack database.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol balancer factor RD-F-078 score red collected_at 2026-05-05 12:41:36