DeFi automated market making protocol
Balancer is a DeFi automated market making protocol that uses novel, self-balancing weighted pools. The protocol enables anyone to create a pool of assets with predefined weights. Balancer aims to be a platform for DAOs and other protocols to build tools that offer useful liquidity to their end users and products.
According to on-chain analyst Onchain Lens (@OnchainLens), the U.S. government has transferred an additional $216,000 worth of assets from the seized FTX/Alameda-related funds, bringing the total transferred amount to $984,000. The assets involved in this transfer include LINK, AAVE, CHZ, and BAL.
according to Onchain Lens monitoring, a Balancer attacker has exchanged 21,000 ETH for 617.43 BTC over the past three days, worth $48.72 million. The attacker currently still holds 1,000 ETH, worth $2.32 million, and may conduct further sell-offs.
according to on-chain analyst Ai Yi's monitoring, an address linked to the Balancer attacker has transferred 5,609 ETH, worth $13 million, to THORChain over the past 9 hours. In November 2025, Balancer was hacked for over $116 million, a incident with the same suspected culprit as the Aave attack, both pointing to the North Korean hacker group Lazarus Group. Both entities have recently been frequently using Tornado Cash for money laundering.
According to on-chain analyst Yujin (@EmberCN), the hacker who stole approximately $98 million worth of assets from Balancer last November has been continuously swapping ETH for BTC via THORChain. To date, the hacker has swapped a total of 14,300 ETH for 419.3 BTC (approximately $32.51 million). The hacker currently holds 7,700 ETH on the Ethereum chain and 419.3 BTC on the Bitcoin chain, with a combined value of approximately $50.4 million. Since the price of ETH has fallen significantly from around $3,600 at the time of the theft, the value of the hacker’s holdings has shrunk by nearly half—from the original $98 million.
According to on-chain analyst Yujin (@EmberCN), the hacker who stole approximately $98 million in assets from Balancer last November is today exchanging ETH for BTC via THORChain. So far, 7,000 ETH have been swapped for 204.7 BTC—valued at roughly $15.88 million—and the process continues. Additionally, it has been disclosed that this address currently holds 15,000 ETH on Ethereum, valued at approximately $34.65 million, and 204.7 BTC on Bitcoin.
According to on-chain analyst Onchain Lens (@OnchainLens), the Balancer hacker’s address has reactivated after five months of dormancy, transferring 100 ETH (approximately $233,000) to a new wallet and beginning fund transfers via ThorChain. The hacker currently still holds 21,900 ETH, valued at approximately $51.13 million.
According to BlockSec Phalcon (@Phalcon_xyz), the $TOP token suffered a governance attack, resulting in losses of approximately $1.59 million. The attacker exploited the token’s low market capitalization to acquire over 50% of voting power at minimal cost. Subsequently, they passed a malicious governance proposal to mint a large quantity of $TOP tokens for themselves, then swapped these tokens for WETH via the Balancer liquidity pool—depleting the pool’s liquidity. BlockSec Phalcon advises projects using governance mechanisms similar to those of Lido or Aragon to promptly review governance security measures, including voting power distribution, quorum and approval thresholds, and minting permissions.
according to Onchain Lens monitoring, a Balancer attacker has exchanged 21,000 ETH for 617.43 BTC over the past three days, worth $48.72 million. The attacker currently still holds 1,000 ETH, worth $2.32 million, and may conduct further sell-offs.
according to on-chain analyst Ai Yi's monitoring, an address linked to the Balancer attacker has transferred 5,609 ETH, worth $13 million, to THORChain over the past 9 hours. In November 2025, Balancer was hacked for over $116 million, a incident with the same suspected culprit as the Aave attack, both pointing to the North Korean hacker group Lazarus Group. Both entities have recently been frequently using Tornado Cash for money laundering.
According to on-chain analyst Yujin (@EmberCN), the hacker who stole approximately $98 million worth of assets from Balancer last November has been continuously swapping ETH for BTC via THORChain. To date, the hacker has swapped a total of 14,300 ETH for 419.3 BTC (approximately $32.51 million). The hacker currently holds 7,700 ETH on the Ethereum chain and 419.3 BTC on the Bitcoin chain, with a combined value of approximately $50.4 million. Since the price of ETH has fallen significantly from around $3,600 at the time of the theft, the value of the hacker’s holdings has shrunk by nearly half—from the original $98 million.
According to Onchain Lens monitoring, the Balancer attacker (0xa6d6...BDaA) exchanged 13,191 ETH for 386.52 BTC, worth $30.54 million, over the past 15 hours. The attacker currently still holds 8,000 ETH, valued at $18.52 million.
According to on-chain analyst Yujin (@EmberCN), the hacker who stole approximately $98 million in assets from Balancer last November is today exchanging ETH for BTC via THORChain. So far, 7,000 ETH have been swapped for 204.7 BTC—valued at roughly $15.88 million—and the process continues. Additionally, it has been disclosed that this address currently holds 15,000 ETH on Ethereum, valued at approximately $34.65 million, and 204.7 BTC on Bitcoin.
According to on-chain analyst Onchain Lens (@OnchainLens), the U.S. government has transferred an additional $216,000 worth of assets from the seized FTX/Alameda-related funds, bringing the total transferred amount to $984,000. The assets involved in this transfer include LINK, AAVE, CHZ, and BAL.
According to BlockSec Phalcon (@Phalcon_xyz), the $TOP token suffered a governance attack, resulting in losses of approximately $1.59 million. The attacker exploited the token’s low market capitalization to acquire over 50% of voting power at minimal cost. Subsequently, they passed a malicious governance proposal to mint a large quantity of $TOP tokens for themselves, then swapped these tokens for WETH via the Balancer liquidity pool—depleting the pool’s liquidity. BlockSec Phalcon advises projects using governance mechanisms similar to those of Lido or Aragon to promptly review governance security measures, including voting power distribution, quorum and approval thresholds, and minting permissions.
the Ethereum Foundation has disclosed the outcomes of a recent interoperability meeting among core developers held in Svalbard, Norway, and provided an update on the key technical progress of the next upgrade phase, "Glamsterdam." During the meeting, multi-client teams collaborated on network scaling and execution layer optimization, making progress in several areas. Developers confirmed that a "credible path" post-Glamsterdam has been agreed upon, based on the combined results of ePBS, BAL optimizations, and the EIP-8037 repricing mechanism.On the execution layer side, ePBS (External Proposer Separation) has been running stably on the multi-client Glamsterdam-devnet. The external block builder process has completed end-to-end testing, covering nearly all client implementations. Meanwhile, EIP-8037 has been finalized, establishing the fixed cost_per_state_byte model and completing the full repricing parameter output on bal-devnet-6.The expansion track "Hegotá" has also made progress. FOCIL-related prototypes now have operable implementations. The scope of requirements for Account Abstraction (AA) has been defined, and the next phase will move to multi-client devnet verification. Current development efforts remain focused on the final delivery of Glamsterdam, while simultaneously advancing the Hegotá expansion design and the subsequent Strawmap roadmap evolution. The devnet is now live, and features like FOCIL are expected to be further deepened in the next phase of testing.At an organizational level, this interop meeting also marked the official start of leadership restructuring within the Protocol Cluster. The new leads include Will Corcoran, Kev Wedderburn, and Fredrik. Will Corcoran will oversee zkVM proofing and post-quantum consensus coordination, Kev Wedderburn will lead zkEVM research and development, and Fredrik will be responsible for protocol security and the Trillion Dollar Security project. Former Protocol Cluster leadership team members Barnabé Monnot and Tim Beiko will gradually step back from management roles, while Alex Stokes is entering a sabbatical cycle. The Foundation stated that during their tenure, the Protocol team successfully advanced modularization and drove the Fusaka upgrade to launch (December 2025), introducing PeerDAS and increasing mainnet gas capacity.
according to Onchain Lens monitoring, a Balancer attacker has exchanged 21,000 ETH for 617.43 BTC over the past three days, worth $48.72 million. The attacker currently still holds 1,000 ETH, worth $2.32 million, and may conduct further sell-offs.
according to on-chain analyst Ai Yi's monitoring, an address linked to the Balancer attacker has transferred 5,609 ETH, worth $13 million, to THORChain over the past 9 hours. In November 2025, Balancer was hacked for over $116 million, a incident with the same suspected culprit as the Aave attack, both pointing to the North Korean hacker group Lazarus Group. Both entities have recently been frequently using Tornado Cash for money laundering.
According to on-chain analyst Yujin (@EmberCN), the hacker who stole approximately $98 million worth of assets from Balancer last November has been continuously swapping ETH for BTC via THORChain. To date, the hacker has swapped a total of 14,300 ETH for 419.3 BTC (approximately $32.51 million). The hacker currently holds 7,700 ETH on the Ethereum chain and 419.3 BTC on the Bitcoin chain, with a combined value of approximately $50.4 million. Since the price of ETH has fallen significantly from around $3,600 at the time of the theft, the value of the hacker’s holdings has shrunk by nearly half—from the original $98 million.