Balancer Released Recovery Plan for Stolen ETH
The protocol has proposed a repayment plan for liquidity providers impacted by an August 2026 security exploit.
Updated on Sept. 21, 2026 in Cybersecurity
Live Poll
Do you trust DeFi protocols to adequately reimburse your funds after a security breach?
Balancer has issued a recovery proposal to return 296.401711 ETH to users affected by an August 31 exploit. The plan covers 120 legacy pools that lost approximately $1.39 million in tokens.
Why it matters
The proposal aims to keep recovered funds separate from the protocol treasury to ensure they are returned directly to the liquidity providers who suffered losses. Distribution is contingent on a successful vote and legal liability releases from participants.
The plan allocates assets to 120 affected legacy pools based on their share of total dollar losses at Ethereum block 25,872,248. The 296.401711 ETH currently held in the recovery pool was gathered from multiple independent sources.
The players
Balancer
This is a decentralized finance protocol that utilizes automated market maker technology for liquidity provision.
Ultrasound.money
This is a platform that tracks Ethereum network metrics, supply dynamics, and burn statistics.
The details
The funds were returned to the Balancer DAO Multisig between September 8 and September 16 by several parties, including three whitehats, one greyhat, and Ultrasound.money. Claim mechanisms will only be deployed following a successful governance vote.
Timeline
August 31, 2026: An exploit impacted 120 legacy pools.
September 8-16, 2026: Recovered ETH was returned to the Balancer DAO Multisig.
September 18, 2026: The recovery proposal was posted to the forum.
September 20, 2026: The proposal remained labeled BIP-XXX without a voting link.
The Tech Race
This recovery effort highlights the ongoing challenges of securing legacy smart contracts within the rapidly evolving decentralized finance sector. It positions Balancer among other protocols attempting to balance user restitution with the complex legal requirements of blockchain governance.
Liquidity providers involved in the affected pools must monitor the governance portal to participate in the upcoming vote. Eligible claimants will be required to provide legal liability releases before they can access their portion of the recovered funds.
The takeaway
Affected liquidity providers should review the specific terms of the BIP-XXX proposal to understand their potential repayment status. Following the formal vote process is critical for users looking to reclaim their portion of the recovered assets.
Further reading
For more context on how protocols manage security events, see the latest updates on Cybersecurity.
Live Poll
Do you trust DeFi protocols to adequately reimburse your funds after a security breach?
