Balance Coin (BLC) collapsed by over 99% on Tuesday after DeFi protocol 42DAO suffered an exploit that security researchers estimate may have drained about $915,000 from the platform.

The attack sent BLC from nearly $1 to fractions of a cent in one fell swoop, adding another entry to a growing list of crypto protocols breached in 2026.

Oracle Manipulation Triggered Rapid Liquidation

The incident was first flagged by blockchain security firm PeckShield, which reported that 42DAO had been exploited for approximately $915,000. SlowMist later published a more detailed breakdown, putting the loss closer to $912,000 and tracing the root cause to 42DAO’s Median Oracle, which reportedly fed an abnormally low BTCB price into the system.

According to SlowMist, the attacker used the protocol’s Spotter poke function to write that bad price straight into the VAT contract since the Spotter lacked several safeguards, including no price deviation checks, no maximum drawdown limits, and no minimum price floor protections.

Once the manipulated price entered the protocol’s accounting system, the Dog module picked it up with “no liquidation delay or oracle price validation,” allowing the attacker to trigger instant liquidations across several BTCB vaults in one transaction. SlowMist identified the bad actor’s wallet as 0x9d8d…231c and the victim contract as 0x973a…a9c0c, while the exploited Spotter and Dog contracts sit at 0x849d…29288 and 0x0010…1f634e.

The market reaction was swift, with data from GeckoTerminal showing BLC trading around $0.0025 at the time of writing, down 99.75% in the last 24 hours after previously trading at around $0.997. The token’s market cap has also fallen to about $12,000, with trading volume at $94,900 across more than 1,600 transactions, over 1,000 of those being buys and the rest being sells.

Another Security Breach Hits DeFi

42DAO is the latest in a run of DeFi and bridge exploits this year. Other recent ones include an attack on Allbridge, a cross-chain stablecoin bridge, which was forced to pause activity on July 20 after a hacker made off with $1.65 million. According to investigators, the thief manipulated Allbridge’s stablecoin pool ratios using transactions funded by a flash loan before extracting funds from distorted liquidity pools.

In June, Syscoin suffered a bridge exploit that allowed an attacker to mint as many as 5 billion SYS tokens, an act that triggered a near 20% drop in the asset’s price. A month before that, the Echo Protocol ended up suspending cross-chain transactions after an exploit involving the minting of 1000 eBTC. That particular incident also hurt Echo’s native token, as it immediately dumped more than 12% of its value.

While the technical details may be different, the 42DAO incident followed a familiar pattern where the exploit did not rely on breaking cryptography or stealing keys but instead took advantage of missing safeguards around price feeds and liquidations.

Source: CryptoPotato