Major DeFi protocol shuts after $110M exploit

TLDR

Balancer Labs, the core company behind DeFi protocol Balancer (BAL), is shutting down after a roughly $110 million exploit in November 2025.

1. The exploit drained over $100 million across Balancers V2 pools and left the corporate entity with heavy legal and financial liabilities.
2. The on chain Balancer protocol will continue under the Balancer maker/">DAO and foundation, with deep cuts to costs and a major overhaul of BAL token economics.
3. For DeFi users, the case highlights how complex AMM designs and real world legal risk can still threaten blue chip protocols, and it may accelerate a shift toward leaner DAO first structures.

Deep Dive

1. What Actually Shut Down

Reports from several outlets say Balancer Labs will dissolve after a November 2025 exploit that drained about $110 million from its V2 vault across multiple chains including Ethereum, Arbitrum and others. One detailed breakdown cites losses near $128 million and attributes the bug to rounding errors in stable pool swap logic, which attackers used to extract funds from composable pools at favorable prices.

Co founder Fernando Martinelli described the post hack entity as a liability rather than an asset, pointing to ongoing legal exposure and a lack of sustainable revenue as reasons to wind it down.

2. Protocol Survival And Token Changes

Despite the corporate shutdown, Balancer as a protocol is not being turned off. Coverage notes that the DAO and Balancer Foundation will assume responsibility, while key staff move to a new OpCo if governance approves.

The restructuring plan includes ending BAL token emissions, redirecting 100 percent of protocol fees to the DAO treasury, winding down the veBAL governance model and launching a BAL buyback so holders can exit if they do not support the new design. Balancers total value locked has already fallen about 95 percent from a peak near 3.5 billion dollars to roughly the mid one hundred million range.

3. Lessons For DeFi Users

This incident shows that even audited, long running DeFi blue chips can harbor deep design bugs that only surface under adversarial conditions. It also illustrates a key distinction: smart contracts can keep running permissionlessly while the legal wrapper that funded and coordinated development collapses.

For LPs and users, risk now includes both technical design risk and the question of who, if anyone, stands behind the protocol when things go wrong.

Conclusion

A major DeFi name lost its corporate shell not because the code stopped working, but because an exploit wiped out capital and created untenable legal and economic pressure. Balancers next chapter, run by a leaner DAO centric structure, will be an important test of whether large protocols can truly survive onchain after their founding companies disappear.