Balance Coin (BLC) collapsed by over 99% on Tuesday after DeFi protocol 42DAO suffered an exploit that security researchers estimate may have drained about $915,000 from the platform.
The attack sent BLC from nearly $1 to fractions of a cent in one fell swoop, adding another entry to a growing list of crypto protocols breached in 2026.
The incident was first flagged by blockchain security firm PeckShield, which reported that 42DAO had been exploited for approximately $915,000. SlowMist later published a more detailed breakdown, putting the loss closer to $912,000 and tracing the root cause to 42DAO’s Median Oracle, which reportedly fed an abnormally low BTCB price into the system.
According to SlowMist, the attacker used the protocol’s Spotter poke function to write that bad price straight into the VAT contract since the Spotter lacked several safeguards, including no price deviation checks, no maximum drawdown limits, and no minimum price floor protections.
Once the manipulated price entered the protocol’s accounting system, the Dog module picked it up with “no liquidation delay or oracle price validation,” allowing the attacker to trigger instant liquidations across several BTCB vaults in one transaction. SlowMist identified the bad actor’s wallet as 0x9d8d…231c and the victim contract as 0x973a…a9c0c, while the exploited Spotter and Dog contracts sit at 0x849d…29288 and 0x0010…1f634e.
The market reaction was swift, with data from GeckoTerminal showing BLC trading around $0.0025 at the time of writing, down 99.75% in the last 24 hours after previously trading at around $0.997. The token’s market cap has also fallen to about $12,000, with trading volume at $94,900 across more than 1,600 transactions, over 1,000 of those being buys and the rest being sells.
42DAO is the latest in a run of DeFi and bridge exploits this year. Other recent ones include an attack on Allbridge, a cross-chain stablecoin bridge, which was forced to pause activity on July 20 after a hacker made off with $1.65 million. According to investigators, the thief manipulated Allbridge’s stablecoin pool ratios using transactions funded by a flash loan before extracting funds from distorted liquidity pools.
In June, Syscoin suffered a bridge exploit that allowed an attacker to mint as many as 5 billion SYS tokens, an act that triggered a near 20% drop in the asset’s price. A month before that, the Echo Protocol ended up suspending cross-chain transactions after an exploit in
小靓分析：
🦊 小靓解读
BLC因42DAO的Median Oracle被操控，价格从近$1暴跌至几乎归零，损失约$91.5万。这暴露了依赖单一预言机喂价的DeFi协议在2026年仍存在致命漏洞。
📊 市场影响
短期BLC已无实际价值，抛压可能持续清盘；该事件会进一步打击市场对中小型DeFi协议的信任，引发资金向头部协议迁移。
💡 操作建议
避开依赖非去中心化预言机的低市值项目，交易前可查看协议是否使用Chainlink等成熟喂价方案。若持有BLC，建议尽快止损离场。
风险提示：
该资讯来源于公开渠道，仅供参考。Traceless 无痕智盈平台不对此信息准确性做任何保证。