According to @EmberCN, the address linked to the Balancer exploit swapped ETH LST tokens and other non-ETH assets into ETH, then deposited 2,000 ETH (about $6.36 million) into Tornado Cash within the past hour; this activity is visible on-chain. source: x.com/EmberCN/status/1989550291327525232, source: etherscan.io/address/0x0e9c9473d0c504da72763426719f6f03a15544d5 On-chain records for 0x0e9c9473d0c504da72763426719f6f03a15544d5 show multiple deposits to Tornado Cash contracts totaling 2,000 ETH in a one-hour window, indicating active obfuscation of funds. source: etherscan.io/address/0x0e9c9473d0c504da72763426719f6f03a15544d5 @EmberCN adds that moving the stolen ETH through Tornado Cash likely signals the actor is not pursuing a white-hat bounty pathway that would involve returning funds. source: x.com/EmberCN/status/1989550291327525232 For traders, Tornado Cash usage aligns with patterns seen in crypto hacks where mixers are used to launder stolen assets, complicating tracing and recovery; this typically heightens risk perception for related tokens and pools. source: home.treasury.gov/news/press-releases/jy0916, source: blog.chainalysis.com/reports/crypto-crime-mid-year-update-2022-mixers Monitor BAL, Balancer-related pools, and further outflows from the flagged address for potential liquidity shifts and on-chain sell pressure signals tied to the exploit. source: x.com/EmberCN/status/1989550291327525232, source: etherscan.io/address/0x0e9c9473d0c504da72763426719f6f03a15544d5

According to @EmberCN, StakeWise executed a contract call to reclaim 5,041 osETH worth about $19.3M from the Balancer exploiter, reducing the stolen tally from $117M to $98M, source: https://x.com/EmberCN/status/1985566230502420678. The exploiter has been swapping LST holdings into ETH and now holds more than half of the stolen assets in ETH, sources: https://x.com/EmberCN/status/1985566230502420678 and https://intel.arkm.com/explorer/entity/a1143094-5699-4e4a-a5ae-bca37094202c. Traders can monitor the listed address set for further ETH flows to assess potential order-book impact, source: https://intel.arkm.com/explorer/entity/a1143094-5699-4e4a-a5ae-bca37094202c.

According to @EmberCN, a hacker stole about 117 million dollars from Balancer across Ethereum, Base, OP, Sonic, Polygon, and Berachain, with most of the haul being ETH liquid staking tokens. According to @EmberCN, the attacker has begun converting liquid staking tokens to ETH, including a swap of 10 osETH for 10.55 ETH roughly 20 minutes before the post. According to the ARKM entity page shared by @EmberCN at https://intel.arkm.com/explorer/entity/a1143094-5699-4e4a-a5ae-bca37094202c, a set of suspected attacker addresses is available for monitoring. According to @EmberCN, traders can track on-chain flows from the ARKM listed addresses to manage execution and liquidity risk on ETH LST pairs across the affected chains.

According to @ai_9684xtpa, legacy DeFi protocol Balancer has suffered theft exceeding 116 million dollars, with the overall impact still uncertain and potential knock-on effects to other DeFi protocols flagged by the author; source: @ai_9684xtpa. The alleged attacker address for on-chain tracking is listed at intel.arkm.com/explorer/entity/6c16da4c-86c3-4fa4-8075-c78f963e3274; source: @ai_9684xtpa and Arkham Intel. Traders should monitor BAL price action, Balancer pool liquidity, and flows from the cited attacker address given the reported uncertainty about broader impact; source: @ai_9684xtpa and Arkham Intel.

According to @OnchainDataNerd, DeFi protocol Balancer was reportedly hacked with roughly $100M in assets exploited, including 7,838 $WETH, 6,851 $osETH, 5,431 $wstETH, 2,443 $frxETH, 1,224 $rsETH, and 1,037 $rETH; source: @OnchainDataNerd on X. The attacker address to monitor is debank.com/profile/0xaa760d53541d8390074c61defeaba314675b8e3f, as provided in the post; source: @OnchainDataNerd via Debank. For trading, focus centers on these listed assets and Balancer-linked liquidity given they are identified as exploited in the report; source: @OnchainDataNerd on X.

According to @PeckShieldAlert, Balancer has been drained of approximately $70.8 million in crypto, including 6,851.12 osETH (~$27M), 6,587.44 WETH (~$24.5M), and 4,259.84 wstETH (~$19.3M) (source: @PeckShieldAlert on X, Nov 3, 2025). The alert identifies osETH, WETH, and wstETH as the impacted assets on Balancer, enabling traders to assess direct exposure in related pools and positions following the report (source: @PeckShieldAlert on X, Nov 3, 2025). By dollar value, osETH is the largest share of the reported drain (~$27M), followed by WETH (~$24.5M) and wstETH (~$19.3M), which can inform the priority of risk checks for ETH-linked token markets (source: @PeckShieldAlert on X, Nov 3, 2025).