Balancer V1 Pool Drains $234K in Exploit Linked to Calculation Error

A legacy Balancer V1 liquidity pool fell victim to a rounding-error exploit on August 31, 2026, resulting in approximately $234,000 in losses. The attacker leveraged a calculation flaw to mint 4,408.8 BPT tokens by depositing minimal capital - a single satoshi - after compressing the pool's WBTC reserves. This vulnerability mirrors the same class of bug that previously affected Balancer's V2 pools, which sustained a significantly larger $116 million loss last November.

The incident highlights persistent risks in legacy DeFi infrastructure, particularly around token minting logic and reserve calculations. While the V1 drain is substantially smaller than the earlier V2 incident, it underscores how similar rounding vulnerabilities can resurface across different protocol versions if not comprehensively addressed.

• A rounding-error flaw allowed an attacker to mint disproportionate BPT tokens with minimal capital, draining $234,000 from a Balancer V1 pool.
• The exploit mechanism mirrors a previous vulnerability class that drained $116 million from Balancer V2 pools, suggesting inadequate fixes across versions.
• Legacy pools remain attractive targets for calculation-based attacks when reserve compression creates exploitable precision gaps.