A bitcoin-backed stablecoin project called Balance saw its token collapse by roughly 99% after an attacker exploited a pricing vulnerability, draining about $1 million from the protocol's bitcoin vaults in a single transaction.
How the Attack Unfolded
The exploit hinged on manipulating the price data that Balance's lending system relied on to value collateral. According to accounts of the incident, the attacker fed the protocol a fabricated bitcoin price that was far below the asset's real market value.
With that artificially low figure in place, vaults that should have remained comfortably solvent were suddenly flagged as undercollateralized. The attacker then triggered liquidations on those positions, seizing the collateral and pocketing the difference between the manipulated price and the true value of the bitcoin.
A single fabricated price turned healthy vaults into fair game, letting the attacker walk away with roughly $1 million.
Because the entire sequence executed within one transaction, there was little opportunity for the protocol or its users to intervene before the damage was done.
Fallout for Holders and the Broader Lesson
The consequences for the Balance token were immediate and severe. As news of the drained vaults spread, the stablecoin lost nearly all of its value, cratering by about 99% and leaving holders with a token that no longer traded anywhere near its intended peg.
The episode underscores a recurring weakness in decentralized finance: reliance on price feeds that can be manipulated. Oracle-related exploits have repeatedly proven to be one of the most damaging attack vectors in the sector.
Key takeaways from the incident include:
- Collateral valuations are only as trustworthy as the price data feeding them.
- Liquidation mechanisms can be weaponized when pricing safeguards fail.
- Even bitcoin-backed designs are vulnerable if the surrounding infrastructure is flawed.
For a project built to offer a stable, bitcoin-collateralized asset, the collapse is a stark reminder that robust oracle design and manipulation resistance are essential to survival in DeFi.