Details of the Attack and Preparation

Blockchain analyses show the attacker funded their account stealthily with small 0.1 ETH transfers through Tornado Cash to avoid detection. Coinbase executive Conor Grogan said the attacker stored at least 100 ETH in Tornado Cash smart contracts and that those funds may link to earlier hacks. Grogan stated, “Hacker seems experienced: seeded the account with 100 ETH and operated with 0.1 ETH Tornado Cash transfers. No opsec leaks.” This behavior clearly points to a professional actor who prepared ahead of time. Balancer announced it would offer a 20% white‑hat bounty if the stolen funds were returned in full (minus the reward).

What Makes the Balancer Hack Unique

Deddy Lavid, co‑founder and CEO of blockchain security firm Cyvers, called the Balancer exploit one of the most sophisticated attacks of 2025. The attackers bypassed access control layers to manipulate asset balances directly. This represents a critical failure in operational governance rather than a flaw in core protocol logic.

Lavid also warned that static code audits are no longer enough. He urged platforms to implement continuous, real‑time monitoring to detect suspicious flows before funds are drained.

, co‑founder and CEO of blockchain security firm Cyvers, called the Balancer exploit one of the most sophisticated attacks of 2025. The attackers bypassed access control layers to manipulate asset balances directly. This represents a critical failure in operational governance rather than a flaw in core protocol logic.

Lavid also warned that static code audits are no longer enough. He urged platforms to implement continuous, real‑time monitoring to detect suspicious flows before funds are drained.

Lazarus Group and Long‑Term Preparation Strategies

Similarly, North Korean group Lazarus reportedly paused illicit activity for months before the Bybit hack. Chainalysis data showed a sharp decline in cybercriminal activity after July 1, 2024, which experts interpreted as regrouping to identify new targets and probe infrastructure.

In the Bybit incident, attackers laundered the $1.4 billion through THORChain within 10 days. That operation demonstrates how months‑long stealth and preparation can precede large, professionally executed exploits—parallels that highlight the seriousness of the Balancer incident.

Recommendations for Balancer Users

Store crypto assets only in trusted wallets and avoid moving large sums in single transactions. Be aware that using Tornado Cash and similar mixers can draw attention from professional attackers and investigators, and consider employing multi‑layer security practices to reduce exposure to sophisticated on‑chain exploits.

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post Was the Balancer DEX Hack Prepared Months in Advance? appeared first on Coin Engineer.

Sui Validators Approve Major Recovery Plan

After Cetus, a decentralized exchange, was exploited for over $220 million on May 22, Sui validators acted quickly to freeze $162 million in digital assets. The fate of these funds was determined through a governance vote concluded on May 29.

With 90.9% of validators voting in favor, the recovery proposal passed. The frozen assets will now be transferred to a multisignature wallet and held in trust until distributed to affected users, according to Sui’s official announcement.

You Might Be Interested In: Elon Musk Talks About the Name of a New Memecoin!

This move signals a pivotal step toward financial restitution for those impacted by the exploit.

Validator Intervention Sparks Governance Debate

The swift validator action reignited debate within the crypto world. While decentralization purists voiced concern over the ability to freeze onchain assets, others praised the move as an effective counter to escalating security threats in DeFi.

The recovery initiative extends beyond the frozen funds. It will also leverage Cetus’ own treasury and an emergency loan from the Sui Foundation to fully restore protocol operations.

Cetus Targets Full Recovery Within One Week

Cetus expressed appreciation for the rapid community support and outlined a full roadmap for protocol recovery. The first phase involves upgrading validator nodes to transfer the funds to a multisig wallet, followed by system restoration.

The team expects a full restart within one week. All liquidity providers will regain access to their assets, while remaining losses will be compensated via a dedicated smart contract currently undergoing auditor review.

Cetus emphasized that this compensation mechanism will ensure fair restitution for all affected users.

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post Sui Community Approves Repayment Plan After Cetus Exploit appeared first on Coin Engineer.