Which DeFi breaches moved liquidity?

TLDR

The DeFi breaches that visibly moved liquidity this week were Balancers exploit, Stream Finances collapse, and Hyperliquids vault wipeout.

1. Balancer (BAL) lost about $120$128 million, prompting vault withdrawals and TVL flight media report.
2. Stream Finances $93 million loss depegged xUSD and forced unwinds across linked protocols media report.
3. Hyperliquids vault suffered a $4.9 million wipeout, briefly pausing its bridge and rattling perp liquidity media report.

Deep Dive

1. Balancer Exploit

Balancer (BAL) was exploited for over $120 million via a rounding bug in its V2 vaults, triggering defensive actions and user withdrawals that contributed to a sharp TVL decline across chains. Reports detail a rounding error in batch swaps that attackers used to extract value, with funds then moving out from pools and vaults as risk perception spiked media report. Subsequent coverage framed this as part of a November nightmare for DeFi, noting investors pulled over $1 billion during the week of these exploits media report.

2. Stream Finance Collapse

Stream Finance lost $93 million, causing its xUSD stablecoin to depeg and setting off knock-on effects. Linked protocols disclosed exposures and wound down features or pursued legal remedies, illustrating how money legos can transmit stress through rehypothecation and cross-protocol borrowing media report. The broader backdrop shows DeFi TVL falling from roughly $150 billion to $130 billion around the same period as these breaches, amplifying liquidity contraction signals media report.

3. Hyperliquid Vault Wipeout

Hyperliquids HLP vault suffered a $4.9 million hit after a coordinated market manipulation, using a temporary buy wall to induce liquidations. The protocol briefly paused its bridge, then resumed, but the event underscored fragility in perp markets when automated liquidity backstops are thin media report. A parallel account confirms the sequence and motive, highlighting structural stress rather than code-level exploitation media report.

Conclusion

Liquidity moved away from affected protocols as users withdrew funds, stablecoins depegged, and vault risks materialized. The common thread is composability and leverage amplifying shocks into broader TVL declines, with capital rotating toward simpler designs, stronger risk isolation, and clearer solvency controls. Risk to watch: thin buffers plus interconnected exposures can accelerate outflows after incidents.