According to the source, a new on-chain analysis reports the $116M Balancer exploit was prepared over months, funded through gradual Tornado Cash inflows, with no obvious OPSEC leaks reported. According to the source, the stealth funding and absence of OPSEC mistakes indicate a sophisticated adversary; based on the source, traders should closely monitor BAL liquidity, Balancer pool TVL, and exploit-linked wallet flows for potential prolonged distribution and headline-risk driven sell pressure.

According to @stonecoldpat0, it is a sad day for DeFi and he hopes the hacker cooperates and returns the funds (source: @stonecoldpat0 on X, Nov 3, 2025). The post signals a DeFi security incident but provides no details on the affected protocol, chain, assets, amount, or resolution timeline, limiting trade-specific visibility at this time (source: @stonecoldpat0 on X, Nov 3, 2025). For traders, the absence of identifiers or on-chain references means elevated uncertainty for DeFi risk sentiment until official or on-chain confirmations are released (source: @stonecoldpat0 on X, Nov 3, 2025).

According to @PeckShieldAlert, Balancer (BAL) and multiple forks are under an active multi-chain attack, with total losses across chains reaching about $128.64M so far, source: @PeckShieldAlert on X, Nov 3, 2025. This alert confirms a cross-chain exploit and quantifies realized losses, providing the primary on-chain figure traders can reference for DeFi risk assessment and BAL exposure, source: @PeckShieldAlert on X.

According to @lookonchain, the total stolen funds tied to the Balancer exploit have risen to 116.6 million dollars, as reported on X on Nov 3, 2025. Source: Lookonchain on X. According to @lookonchain, this surge indicates additional funds were compromised or identified since prior counts, raising the current on-chain loss baseline for the incident. Source: Lookonchain on X. According to @lookonchain, traders monitoring DeFi risk can use the updated 116.6 million dollar tally as a key input when assessing exposure to Balancer-related assets and liquidity pools. Source: Lookonchain on X.

According to @lookonchain, the Balancer exploit is ongoing with stolen assets across multiple chains now exceeding $98 million, source: https://x.com/lookonchain/status/1985258890863501820. The author links on-chain addresses for real-time tracking via DeBank, including 0xaa760d53541d8390074c61defeaba314675b8e3f, with additional addresses in the same post, source: https://debank.com/profile/0xaa760d53541d8390074c61defeaba314675b8e3f; https://x.com/lookonchain/status/1985258890863501820. The author advises users to secure funds as the incident continues, reinforcing elevated operational caution for Balancer-related exposure, source: https://x.com/lookonchain/status/1985258890863501820.

According to @PeckShieldAlert, an on-chain exploit remains active across multiple chains with an estimated loss of about 88 million dollars, as reported on Nov 3, 2025 on X at https://x.com/PeckShieldAlert/status/1985263682310611037. According to @PeckShieldAlert, the incident is ongoing, indicating attacker transactions are still in progress on affected networks and elevating operational risk for live trading on those chains. According to @PeckShieldAlert, traders should monitor the cited thread for real-time updates that may affect execution timing and risk limits.

According to Lookonchain, the Balancer protocol appears to have been exploited with about USD 70.6M in assets transferred out. According to Lookonchain, the reported outflows include 6,587 WETH (~USD 24.46M), 6,851 osETH (~USD 26.86M), and 4,260 wstETH (~USD 19.27M). According to Lookonchain, based on these figures osETH accounted for roughly 38.1% of the transfers, WETH 34.7%, and wstETH 27.3%, indicating the scale and composition of the reported outflow.

According to @PANewsCN, on-chain data shows Balancer’s treasury address transferred multiple assets totaling over $70 million to address 0xAa760D53...4675b8e3f (source: @PANewsCN). According to @PANewsCN, the moved assets include 6,587.44 WETH (~$24.48M), 6,851.12 Staked ETH (~$26.86M), 4,259.84 wstETH (~$19.27M), and other ERC-20 tokens (source: @PANewsCN). According to @PANewsCN, the transaction background is unclear and may be related to a potential attack (source: @PANewsCN).

According to @PeckShieldAlert, @hyperdrivedefi reported two accounts in the thBILL market were compromised, causing an estimated ~$773,000 loss, with 288.37 BNB bridged to BNB Chain and 123.6 ETH bridged to Ethereum (source: @PeckShieldAlert). The attacker split and bridged the proceeds across BNB Chain and Ethereum, creating concrete on-chain trails in BNB and ETH that traders can track for post-incident flows and execution risk management (source: @PeckShieldAlert). Traders should monitor movements involving the bridged 288.37 BNB and 123.6 ETH, the thBILL market, and Hyperdrive-linked liquidity on BNB Chain and Ethereum to assess exposure and liquidity conditions following the breach (source: @PeckShieldAlert).

According to @PeckShieldAlert, THORChain suffered an exploit with an estimated loss of about $1.2 million. Source: @PeckShieldAlert on X, Sep 12, 2025. The alert did not provide details on the attack vector, affected chains, or mitigation steps, indicating limited public information at this time. Source: @PeckShieldAlert on X, Sep 12, 2025. For trading, the reported exploit creates immediate headline risk for RUNE and THORChain liquidity pools; traders can monitor centralized exchange order books, funding rates, and on-chain swaps for stress potentially linked to the incident. Source: @PeckShieldAlert on X, Sep 12, 2025. Market participants should track official THORChain updates for confirmations, patches, and any service changes that could impact cross-chain routing and LP withdrawals. Source: @PeckShieldAlert on X, Sep 12, 2025.

According to @PeckShieldAlert, DeFi protocol @bunni_xyz has suffered an exploit with an estimated loss of about $2.4 million, signaling an active security incident tied to Bunni contracts (source: @PeckShieldAlert on X, Sep 2, 2025). The alert confirms a material loss event that elevates smart contract and counterparty risk for users interacting with Bunni-related liquidity or positions until an official fix or postmortem is released (source: @PeckShieldAlert on X). Traders should verify any direct exposure to Bunni-linked contracts and await remediation updates from the project’s official channels before initiating new interactions (source: @PeckShieldAlert on X).

According to @PeckShieldAlert, the decentralized perpetual exchange GMX has been exploited for over $42 million. The blockchain security firm reported that the stolen assets include over $10 million in legacy Frax dollar, $9.6 million in wrapped BTC (wBTC), and $5 million in the DAI stablecoin. The report indicates that $9.6 million of the stolen funds have been bridged to the Ethereum blockchain, while $32 million remains on the Arbitrum network. In response, GMX developers have issued an on-chain message offering the attacker a 10% white-hat bounty for the return of the assets. This major security breach could impact trader confidence in DeFi protocols, particularly those operating on Layer-2 solutions like Arbitrum.

According to @lookonchain, the decentralized perpetual exchange GMX has been exploited for over $42 million, an event confirmed by blockchain security firm PeckShield. The stolen assets include $9.6 million in Wrapped Bitcoin (wBTC), $5 million in the DAI stablecoin, and over $10 million in legacy Frax dollar. PeckShield reported that $9.6 million of the funds have been bridged to the Ethereum blockchain, a common path for laundering through services like Tornado Cash, while $32 million remains on the Arbitrum network where GMX is hosted. In response, GMX developers have publicly offered the attacker a 10% white-hat bounty for the return of the funds. This incident highlights the persistent security risks in the DeFi sector for traders, contributing to the $2.5 billion lost to crypto hacks and scams in the first half of 2025 as reported by CertiK.

According to @lookonchain, the decentralized perpetual exchange GMX has suffered a major exploit resulting in the theft of over $42 million in crypto assets, as reported by blockchain security firm PeckShield. The stolen funds include $9.6 million in wrapped BTC (wBTC), $5 million in DAI stablecoin, and over $10 million in legacy Frax dollar. The report indicates that $9.6 million of the stolen assets have already been bridged to the Ethereum blockchain, a common step before laundering through mixers like Tornado Cash, while $32 million remains on the Arbitrum network where GMX operates. In response, GMX developers have publicly offered the attacker a 10% white-hat bounty for the return of the funds via an on-chain message. This incident adds to the growing security concerns in the DeFi space, which saw $2.5 billion lost to hacks in the first half of 2025, according to a CertiK report.

According to Crypto Rover, a hacker has allegedly stolen $475 million in SUI tokens, with funds still actively flowing into the hacker's wallet as of May 22, 2025 (source: Crypto Rover on Twitter). This incident highlights significant vulnerabilities in the SUI ecosystem and raises immediate concerns for traders regarding token security and potential price volatility. Market participants are advised to monitor SUI token movements closely, as ongoing hacker activity could lead to severe liquidity shocks, increased sell pressure, and broader negative sentiment across DeFi and altcoin sectors.