Oracle flaw crashes Balance Coin stablecoin by 99%
A failure in price-feeding mechanisms allowed an attacker to drain $915,000 from Balance Protocol, wiping out its algorithmic stablecoin and highlighting persistent oracle vulnerabilities in decentralized finance.
Balance Coin, an algorithmic stablecoin issued by Balance Protocol, collapsed to a fraction of a cent after a hacker exploited a fundamental flaw in its price oracle. The token plunged more than 99% to trade at $0.001358, shattering its intended dollar peg and effectively rendering the protocol's core product worthless. Security analysts at PeckShield estimate the attack drained $915,000 from 42DAO, the decentralized autonomous organization that governs the Balance Protocol.
According to blockchain security firm SlowMist, the attacker executed a single transaction that leveraged an artificially depressed Binance Bitcoin (BTCB) price feed. “A single-transaction combo exploited the missing price protection and liquidation delay in Maker-style system, allowing an attacker to liquidate multiple BTCB vaults using an abnormally low oracle price and profit from the arbitrage,” SlowMist said. By exploiting this blind spot, the hacker forcibly liquidated multiple Bitcoin-backed vaults that held sufficient collateral under normal market conditions.
The failure of Balance Coin illustrates the structural fragility of algorithmic stablecoins, which depend entirely on automated smart contract mechanics rather than traditional reserve backing. While the protocol's primary collateral is Bitcoin Cash, the vulnerability resided in its BTCB vaults, demonstrating how diverse collateral pools introduce unmanaged risk vectors. For market professionals and institutional capital, oracle manipulation remains a primary deterrent to decentralized finance, as minor data discrepancies can trigger catastrophic cascading liquidations.
The fact that a live financial protocol lacked basic safeguards—specifically, a delay mechanism to verify extreme price deviations before executing liquidations—highlights ongoing engineering and auditing deficiencies in the sector. Decentralized governance structures like 42DAO often fail to enforce the rigorous risk management standards required for stable