Another Stablecoin Bites the Dust as BLC Crashes From $1 to Near Worthless

Security firms Peckshield and Slowmist confirmed the exploit wrong hours of the attack. Peckshield archetypal estimated the nonaccomplishment adjacent $915,000. Slowmist aboriginal refined that fig to astir $912,000 and published a method breakdown of however the attacker pulled it off.

Balance Coin (BLC) traded adjacent $0.995 to $1.00 earlier the attack. Within hours, it fell to astir $0.0014, past slid further to betwixt $0.0008 and $0.0013 connected large trackers. Coinmarketcap aboriginal showed a terms near an intraday debased of $0.000795, a 24-hour diminution of 99.92%.

How the Exploit Worked

Balance Protocol runs a collateralized indebtedness strategy modeled connected MakerDAO, present known arsenic Users fastener BTCB, the Binance pegged mentation of bitcoin, into vaults and mint BLC against it. A terms oracle tracks the worth of that collateral. When the ratio betwixt indebtedness and collateral drops excessively low, the protocol liquidates the vault.

The attacker utilized the Spotter contract’s poke relation to propulsion an artificially debased BTCB terms into the system’s accounting contract. The oracle accepted the fig without checking it against marketplace prices. Healthy vaults abruptly looked insolvent. The Dog module, which handles liquidations, seized the collateral successful a azygous transaction and the attacker sold it connected Pancakeswap for a profit.

Slowmist called it a azygous transaction combo that exploited missing terms extortion and a missing liquidation hold successful a Maker benignant system. No backstage keys were compromised. The protocol trusted a fig it should person questioned.

Blockchain records constituent to a azygous transaction hash arsenic the superior exploit path, on with an attacker wallet address, a unfortunate contract, the Spotter contract, and the Dog declaration utilized for liquidations. Investigators traced each measurement from the mendacious terms introduction to the last merchantability connected Pancakeswap, giving a afloat relationship of however a legitimate-looking relation telephone turned into a $912,000 payday.

Several modular safeguards were reportedly missing from the design:

• No terms deviation checks against extracurricular markets.
• No maximum drawdown limits connected the oracle feed.
• No terms level to drawback evidently mendacious readings.
• No hold betwixt a terms update and a liquidation.

Market Fallout

Before the attack, Balance Coin’s circulating proviso sat adjacent 3.5 cardinal tokens, giving it a nominal worth adjacent to $3.5 million. After the collapse, its marketplace capitalization fell to astir $2,800. Trading measurement spiked to astir $103,000 successful 24 hours arsenic holders exited and arbitrage traders picked done the remains.

Image source: Grok station connected X.

The token’s each clip precocious was $1.42 successful May 2025. The July 22 depeg became its caller each clip low. 42DAO has not announced a betterment program oregon compensation for affected users. The drained BTCB remains nether the attacker’s control.

Some trackers logged thousands of transactions successful the hours aft the exploit, galore of them buys, a signifier communal erstwhile speculators pursuit a depegged token hoping for a rebound oregon a speedy arbitrage trade. The enactment did not reconstruct the peg.

Balance Coin’s ranking connected large aggregators dropped heavy into the little thousands, and liquidity that was already bladed earlier the onslaught mostly disappeared. Coinmarketcap stats accidental the circulating proviso of BLC is “self-reported” and the coin has much than 18,000 holders.

Part of a Longer Pattern

Balance Coin is present 1 of a agelong database of stablecoins that failed to clasp their peg. TerraUSD mislaid its dollar worth successful the May 2022 successful a collapse that wiped retired tens of billions of dollars and dragged its sister token LUNA to adjacent zero. Circle’s USDC concisely de-pegegd successful March 2023 aft Silicon Valley Bank failed, though it recovered erstwhile reserves were confirmed safe. Smaller projects similar Iron Finance, Beanstalk, and Acala’s aUSD suffered akin exploit-driven collapses successful anterior years.

Oracle manipulation is simply a recurring cause. Attackers provender a protocol a mendacious price, the protocol reacts arsenic designed, and worth moves to the attacker earlier anyone tin halt it. Balance Protocol copied the architecture of larger, much established systems similar MakerDAO but near retired the guardrails those systems added aft years of adjacent misses.

Why It Matters

Balance Coin’s marketplace was tiny adjacent to large stablecoins similar USDT and USDC. Still, each exploit similar this 1 adds to a signifier that regulators and users are watching closely. In 2026, stablecoin oversight successful the United States operates nether the GENIUS Act, which puts unit connected issuers to beryllium their reserves and their systems tin clasp up nether stress.

For now, Balance Coin trades adjacent zero. The BNB-based wrapped bitcoin collateral that erstwhile backed it sits successful a wallet extracurricular 42DAO’s control, and the protocol has yet to accidental what happens next.