DeTracker Security Feed

$186.7M lost this week $2.0B lost in 30 days $95.2B lost this year

🚨SlowMist TI Alert🚨 💸 @Balancer Loss: ~234k USD 🔍 Root Cause: Balancer V1 BPool `joinswapPoolAmountOut` lets caller specify BPT output while `calcSingleInGivenPoolOut` reverse-computes input via 18-decimal fixed-point math. After attacker compressed WBTC reserves to dust

Balancer V1 experienced a loss of approximately $234,000 due to an exploit in the BPool contract. An attacker manipulated the `joinswapPoolAmountOut` function by specifying BPT output and using reverse-computed input via fixed-point math, which compressed WBTC reserves.

Source: SlowMist Team (opens in a new tab)

#Balancer