Balance Coin, a small algorithmic stablecoin designed to hold a $1 peg, lost more than 99% of its value on Wednesday after an attacker manipulated the price oracle behind its lending protocol and walked away with roughly $912,000 in a single transaction. The token was trading near its target just a day before the exploit. By the time on-chain data and security researchers flagged the incident, it had sunk to just under $0.0014.
The funds were drained from 42DAO, the governance body behind Balance Protocol. The protocol works like a Maker-style system: users lock bitcoin-backed collateral to mint the stablecoin, and their vaults get liquidated if collateral value drops too far. The attacker found a gap in that mechanism. According to security firm SlowMist, they pushed an artificially low price for Binance-peg Bitcoin (BTCB) into the protocol's oracle, then used that fake price to trigger liquidations on vaults that were nowhere close to being underwater.
What the oracle missed
SlowMist described the attack on X as a "single-transaction combo" that exploited two missing safeguards at once: no sanity check on incoming price data, and no delay between a price update and a liquidation firing. Without either of those controls, the attacker could feed in a bogus BTCB price, immediately seize collateral from multiple vaults, and swap it for profit before anything could intervene. Security firm PeckShield put the total loss slightly higher, at around $915,000.
The collapse wiped out nearly all of Balance Coin's roughly $3.5 million in nominal market value. Holders who didn't exit in time are left with a stablecoin worth a fraction of a cent, a reminder that a peg is only as solid as the price feed enforcing it.
Bitcoin markets barely flinched on the news, though BTCB liquidity on smaller DeFi venues tightened noticeably in the hours following the exploit.
This article is for informational purposes only and does not constitute financial advice. Always do your own research before making investment decisions.
